Privacy Policy

Eric Michael Smith d/b/a AI42 Tech ("AI42," "we," "us," or "our") operates the AI42 platform, an AI-powered productivity and personal assistant service. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website, applications, and services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

1. Information We Collect

We collect the following categories of information to provide, improve, and personalize the Service:

1.1 Account Data

When you create an account, we collect your email address, name, and avatar or profile picture. This information is necessary to identify your account and provide the Service.

1.2 User Content

Content you create within the platform, including tasks, projects, boards, notes, journal entries, resources, and mind maps. This data is stored to provide the core functionality of the Service and is associated with your account.

1.3 Financial Data

If you use our financial tracking features, we collect transaction amounts, categories, budgets, and payment method descriptions that you manually enter. This data is user-entered for personal tracking purposes and is not used for payment processing. We do not automatically connect to your bank or financial institutions.

1.4 Calendar & Meeting Data

Calendar events, meeting transcripts, AI-generated meeting summaries, action items, and attendee information. Meeting transcripts are generated when you use our AI note-taker feature during meetings.

1.5 Communication Data

Chat messages exchanged with the AI assistant and your conversation history. These conversations are used to provide contextual AI responses and may be used to improve AI memory features.

1.6 Voice & Audio Data

Voice input processed via LiveKit for real-time voice interactions with the AI assistant. Raw audio is transient and is not stored; it is transcribed to text in real time and only the resulting text transcription is retained.

1.7 AI Memory Data

Our AI assistant may extract and store semantic memories from your conversations, including facts about you, your preferences, relationships, goals, and behavioral patterns. This data is used to personalize the AI experience and provide more relevant responses. You can view, manage, and delete AI memories at any time through the settings panel.

1.8 Google Integration Data

If you choose to connect your Google account, we may access Gmail messages, Google Calendar events, and Google Drive files as authorized by you during the OAuth consent process. This data is only accessed when you explicitly connect the integration and can be disconnected at any time. AI42's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

1.9 Health & Wellness Data

If you use our wellness features, we collect nutrition logs, breathwork session data, and habit tracking information that you voluntarily enter. This data is used solely to provide wellness tracking features.

1.10 Gamification Data

Experience points (XP), achievements, and badges earned through your use of the platform. This data is used to power engagement features.

1.11 Device & Usage Data

Browser type and version, session timestamps, and online presence status. This information is collected automatically to ensure the Service functions correctly and to provide features like real-time collaboration.

1.12 Push Notification Data

If you enable push notifications, we store your device's push notification endpoint URLs and encryption keys necessary to deliver notifications. You can disable push notifications at any time through your browser or device settings.

2. How We Use Your Data

We use the information we collect for the following purposes:

• Provide the Service: To operate, maintain, and deliver the features of the platform, including AI-powered task management, calendar, financial tracking, and meeting tools.
• Personalize AI: To personalize your AI assistant experience through conversation context and semantic memory.
• Improve the Service: To understand how users interact with the platform, diagnose technical issues, and develop new features.
• Communicate: To send service-related notifications, respond to inquiries, and provide customer support.
• Security: To detect, prevent, and address fraud, abuse, security incidents, and technical issues.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests.

3. Third-Party Services

We use the following third-party service providers to operate the Service. Your data may be shared with these providers as necessary to deliver functionality:

AI Processing Providers

Infrastructure & Communication

External Integrations

Each third-party provider processes data in accordance with their own privacy policies. We encourage you to review those policies. We only share the minimum data necessary for each provider to perform its function.

4. Cookies & Local Storage

We use limited browser storage mechanisms to ensure the Service functions correctly:

Essential Storage

Supabase authentication tokens stored in local storage. These are strictly necessary for you to remain signed in and use the Service.

Functional Storage

User preferences such as theme selection (light/dark mode), UI state (sidebar position, active tool panels, view preferences). These improve your experience by remembering your settings.

What We Do Not Use

We do not currently use analytics cookies, advertising cookies, marketing tracking pixels, or any third-party tracking technologies. If this changes in the future, we will update this Privacy Policy and obtain your consent where required.

5. Data Retention

We retain your data for the following periods:

After the applicable retention period, data is permanently deleted or anonymized. We may retain certain data longer if required by law or for legitimate business purposes such as resolving disputes or enforcing our agreements.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Deletion: Request that we delete your personal data, subject to certain legal exceptions.
• Right to Correction: Request that we correct inaccurate personal data.
• Right to Portability: Request your data in a structured, commonly used, machine-readable format.
• Right to Restrict Processing: Request that we limit how we process your data in certain circumstances.
• Opt-Out of AI Memory Extraction: You can disable the AI semantic memory feature at any time through your account settings. When disabled, the AI assistant will not extract or store new memories from your conversations.
• Opt-Out of Sale/Sharing (CCPA): We do not sell your personal information. However, you have the right to opt out of any future sale or sharing of your personal information for cross-context behavioral advertising.
• Right to Opt-Out of Automated Decision-Making: You have the right to not be subject to decisions based solely on automated processing that produce legal or similarly significant effects on you.

To exercise any of these rights, please contact us at privacy@ai42tech.com. We will respond to your request within 30 days (or sooner if required by applicable law).

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal data, including:

• AES-256 encryption for sensitive tokens and credentials
• HTTPS/TLS encryption for all data in transit
• Access controls and authentication to limit data access to authorized personnel
• Per-user data isolation to prevent unauthorized cross-account access
• Regular security assessments and monitoring

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security. If you become aware of a security vulnerability, please contact us immediately at privacy@ai42tech.com.

8. International Data Transfers

Your data may be processed in the United States and other countries where our service providers operate. These countries may have data protection laws that differ from the laws of your jurisdiction. By using the Service, you consent to the transfer of your data to these countries. Where required by applicable law, we implement appropriate safeguards for international data transfers, such as Standard Contractual Clauses approved by the European Commission.

9. Children's Privacy

The Service is intended for users aged 16 and older. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take steps to delete that information as quickly as possible. If you believe a child under 16 has provided us with personal information, please contact us at privacy@ai42tech.com.

10. California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information as defined by the CCPA:

• Identifiers: Name, email address, account ID
• Commercial Information: User-entered financial transaction data, subscription records
• Internet Activity: Interaction history with the Service
• Audio/Electronic Information: Voice transcriptions, meeting transcripts
• Professional Information: Information contained in tasks, projects, and notes
• Inferences: AI-extracted preferences, behavioral patterns, goals
• Sensitive Personal Information: Health/wellness data (voluntarily provided), financial data (voluntarily provided)

Your California Privacy Rights

• Right to Know: You may request that we disclose what personal information we have collected, the sources, purposes, and the categories of third parties with whom we share it.
• Right to Delete: You may request that we delete personal information we have collected from you, subject to certain legal exceptions.
• Right to Correct: You may request that we correct inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising. If we begin doing so in the future, we will provide a clear opt-out mechanism.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
• Right to Limit Use of Sensitive Personal Information: You may limit our use of sensitive personal information to what is necessary to provide the Service.

To exercise your California privacy rights, contact us at privacy@ai42tech.com or submit a verifiable consumer request. We will verify your identity before processing your request.

11. EU/EEA Residents (GDPR)

If you are located in the European Union or European Economic Area, the General Data Protection Regulation (GDPR) provides you with additional rights and protections.

Legal Bases for Processing

We process your personal data on the following legal bases:

• Performance of Contract: Processing necessary to provide the Service you have requested (e.g., storing your tasks, projects, conversations).
• Consent: Processing based on your explicit consent (e.g., AI memory extraction, Google integration, health/wellness tracking). You may withdraw consent at any time.
• Legitimate Interests: Processing necessary for our legitimate interests, such as improving the Service, ensuring security, and preventing fraud, where those interests are not overridden by your rights.
• Legal Obligation: Processing necessary to comply with legal obligations.

International Data Transfers

When we transfer your data outside the EU/EEA, we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions, or your explicit consent. You may request a copy of these safeguards by contacting us.

Data Protection Authority

You have the right to lodge a complaint with your local data protection authority (supervisory authority) if you believe our processing of your personal data violates the GDPR. You can find your local supervisory authority at https://edpb.europa.eu.

Data Protection Officer

For GDPR-related inquiries, you may contact our privacy team at privacy@ai42tech.com. We will respond to your request within the timeframes required by the GDPR (typically within one month).

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by posting a prominent notice on the Service or by sending you an email notification. We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: