Privacy Policy

Last updated: September 8, 2026

We store only the data needed to operate the service. We never use your data to train our models.

Assure AI (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our platform and services.

1. What Data We Collect and Store

a. Data Stored in the Cloud (Server)

We store the following data on our secure servers (AWS EC2) to provide the service:

Account data: Email address, subscription tier, and Stripe customer ID.
Questions and prompts: The text you enter in the command bar or compile interface (stored in the database projects and run logs).
Uploaded source files: PDFs, images, JSON, YAML, and other documents you upload (stored in the substrate_vault table).
Compiled drafts: JDF ASTs, verification logs, and lock hashes (stored in the jdf_revisions table).
Audit logs: Activity and request logs for enterprise compliance (stored in user_activity_log and audit_log).
Waitlist submissions: Email, company name, and workflow type (if you join the waitlist).

We do not use your data to train our models. We do not sell or share your data with third parties for advertising or marketing purposes.

b. Data Stored Locally on Your Machine

The following data stays on your computer and is never transmitted to our servers:

API keys for connected providers (Claude, Gemini, DeepSeek, Kimi, etc.).
Workbench UI state and preferences (e.g., layout settings, theme preferences).

c. Third-Party AI Providers (When You “Send”)

When you choose to Send a prompt to a connected provider:

Your question and any attached files are transmitted directly from your session to the provider you selected.
The provider’s own terms and privacy policies apply. You must review and accept them before use.
Assure does not independently log or retain raw third-party API responses beyond what is persistently saved to your project files and drafts as part of your standard workspace history.

d. “Closed to the Internet” Mode

When “Closed to the internet” is selected:

Your data is not sent to any external provider.
Processing (including Z3 verification and groundrails) runs on Assure’s secure servers—not on your local machine.
Your data is still stored on Assure’s servers as described in Section 1a.

2. How We Use Your Data

Data Type	Purpose
Email & subscription tier	Account management, billing, and support.
Questions, prompts, and source files	To compile, verify, and audit your documents.
Compiled drafts and lock hashes	To provide version history and audit trails.
Audit logs	To track usage and maintain security for enterprise customers.
Waitlist submissions	To notify you when the service launches or when we need beta testers.
API keys	Used exclusively to connect your local instance to third-party AI providers. Keys never leave your machine.
Usage analytics (optional)	Anonymized, aggregate usage data via Plausible. No personal data is collected.

We do not use your data to train our models. We do not sell or share your data with third parties for advertising or marketing purposes.

3. Sharing Your Data

a. Third-Party AI Providers

When you choose to Send a prompt to a connected provider (e.g., Claude, Gemini, DeepSeek, Kimi):

Your question and any attached files are transmitted directly to the provider you selected.
The provider’s own terms and privacy policies apply.
Assure does not independently log or retain raw third-party responses beyond your saved project history.

b. “Closed to the Internet” Mode

When “Closed to the internet” is selected:

Your data is not sent to any external provider.
Processing runs on Assure’s secure servers.
Your data is still stored on Assure’s servers as described in Section 1a.

c. Service Providers

We use external services to operate the platform:

Service	Purpose	Data Shared
Stripe	Billing and payment processing	Email, Stripe customer ID, payment details
Supabase	Account and subscription management	Email, subscription tier
Clerk	Authentication and user management (when configured)	Email, user ID
Plausible	Anonymous usage analytics	Aggregated, anonymized data only

4. Your Rights

Depending on your jurisdiction (including GDPR and CCPA), you may have the following rights:

Right	How to Exercise
Access	Request a copy of the personal data we hold about you.
Rectification	Request correction of inaccurate personal data.
Erasure	Request deletion of your account and associated data.
Data Portability	Request a machine-readable copy of your data.
Object / Restrict Processing	Object to certain types of processing.

To exercise any of these rights, contact us at: [email protected]

5. Data Security

Measure	Description
Server-side encryption	All data stored on Assure’s servers is encrypted at rest (verified cloud infrastructure configuration).
Encryption in transit	All data transmitted between your browser and Assure’s servers uses secure transport encryption (TLS).
Minimal data retention	Data is retained only as long as necessary to provide the service and comply with legal obligations.
No data used for training	We never use your data to train our models.

6. Data Retention

Data Type	Retention Period
Email and subscription tier	Retained for the duration of your account. Deleted upon account termination.
Stripe customer ID	Retained for billing and payment history purposes, as required by financial regulations.
Questions, files, and drafts	Stored on Assure’s secure servers until you explicitly delete the project, clear your workspace history, or close your account.
Usage analytics (Plausible)	Anonymized and aggregated; no personal data is retained.

7. Children’s Privacy

Assure AI is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us, and we will delete it.

8. Disclaimer – AI-Generated Content

The outputs generated by Assure AI are produced by large language models and deterministic verification engines. While we strive for accuracy and reliability, we make no representations or warranties about the completeness, correctness, or fitness for purpose of any AI-generated content.

Not legal, financial, or professional advice.

The content generated by Assure AI is for informational and drafting assistance purposes only. It does not constitute legal, financial, medical, or other professional advice. Always consult a qualified professional before making decisions based on AI-generated content.

User assumes responsibility.

You are solely responsible for reviewing, verifying, and validating all outputs before using them in any professional, legal, or business context.

Hallucinations and errors.

AI models can produce incorrect, misleading, or hallucinated content. Assure AI’s verification tools (Z3, Red-Hat, Substrate Vault) are designed to reduce these risks, but they do not eliminate them entirely.

No guarantee of accuracy.

We do not guarantee that the output will be error-free, complete, or up-to-date.

No liability for reliance.

To the maximum extent permitted by law, Assure AI disclaims all liability for any loss, damage, or harm arising from your reliance on the outputs generated by the platform.

By using Assure AI, you acknowledge and accept these limitations.

9. Personal Data Document (Data Processing Agreement)

For users in jurisdictions subject to GDPR, CCPA, or similar data protection laws, this section outlines how your personal data is processed.

a. Data Controller and Data Processor

Role	Entity
Data Controller	You (the user) are the data controller for your questions, documents, and prompts. You determine the purposes and means of processing your data.
Data Processor	Assure AI acts as a data processor, processing your data only on your behalf and according to your instructions.

b. Categories of Personal Data Processed

Category	Data Elements
Account data	Email address, subscription tier, Stripe customer ID
Usage data	Anonymized, aggregated analytics (no personal identifiers)
Content data	Your questions, prompts, uploaded files, and compiled drafts – processed and stored securely on our AWS servers

c. Purpose of Processing

Purpose	Legal Basis
Providing the service	Contract performance – to compile, verify, and audit your documents
Billing and account management	Contract performance – to manage subscriptions and payments
Service improvement	Legitimate interest – to improve the platform via anonymized analytics

d. Data Subject Rights

You have the right to:

Access – request a copy of your personal data
Rectification – correct inaccurate data
Erasure – request deletion of your account and associated data
Portability – request a machine-readable copy of your data
Object – object to certain types of processing

To exercise these rights, contact us at: [email protected]

e. Data Transfers

When you Send a prompt to a third-party provider (e.g., Claude, Gemini, DeepSeek), your data may be transferred to servers outside your jurisdiction. These providers are independent data controllers and are subject to their own data protection policies.

10. International Data Transfers

When you Send a question to a third-party provider (e.g., Claude, Gemini, DeepSeek), your data may be transferred to servers located outside your country of residence. These providers are subject to their own data protection policies and may not offer the same level of protection as your local jurisdiction.

By using Assure AI and choosing a provider, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available at https://getassureai.com/privacy. We will notify you of material changes via the workbench or email.

12. Contact Us

If you have any questions about this Privacy Policy or your data:

Email: [email protected]