1. Introduction
YourDataRoom ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered data room platform ("Service").
2. Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Name
- Password (stored securely hashed)
- Company/organization name
Documents and Content
When you use the Service, we store:
- Documents you upload (PDFs, Word documents, spreadsheets, etc.)
- AI-generated analysis of your documents
- Questions asked and answers provided by the AI
- Branding settings (logo, colors, messages)
Usage Information
We automatically collect:
- Login timestamps and session data
- Document views and downloads
- Questions asked and by whom
- IP addresses
- Browser type and device information
3. How We Use Your Information
We use the information we collect to:
- Provide the Service: Store and serve your documents, generate AI responses, manage user access.
- AI Processing: Analyze documents to enable question answering. Documents are processed by our AI to extract information and generate responses.
- Analytics: Provide tenant administrators with insights about user engagement and document activity.
- Security: Maintain audit logs, detect abuse, and protect the Service.
- Communication: Send service-related notifications, respond to support requests.
- Improvement: Analyze usage patterns to improve the Service.
4. Third-Party Services
We use the following third-party services to operate:
- Cloudflare: Hosting, content delivery, and security (infrastructure provider).
- Anthropic: AI processing for document analysis and question answering. Document content is sent to Anthropic's API to generate responses.
- Stripe: Payment processing. We do not store your payment card details; Stripe handles all payment information.
Each of these providers has their own privacy policies governing their use of your data.
5. Data Retention
- Documents and data are stored as long as your account is active.
- Upon account cancellation, data is retained for 30 days before permanent deletion.
- You may request data export at any time before deletion.
- Audit logs are retained for security and compliance purposes.
6. Data Security
We implement multiple security measures to protect your data:
- Encryption in Transit: All data is transmitted over HTTPS/TLS.
- Tenant Isolation: Each organization's data is completely isolated from others.
- Role-Based Access: Users only access data they're authorized to see.
- Audit Logging: All significant actions are logged for security review.
- Secure Infrastructure: We use Cloudflare's infrastructure.
7. Data Sharing
We do not sell your personal information. We may share data in the following circumstances:
- With Service Providers: Third parties that help us operate the Service (as listed above).
- For Legal Reasons: When required by law, court order, or government request.
- Business Transfers: In connection with a merger, acquisition, or sale of assets.
- With Your Consent: When you explicitly authorize sharing.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate personal data.
- Deletion: Request deletion of your personal data.
- Portability: Request your data in a portable format.
- Objection: Object to certain types of processing.
To exercise these rights, contact us at privacy@yourdataroom.app.
9. Cookies
We use essential cookies to maintain your session and authenticate your access. We do not use tracking or advertising cookies.
10. Children's Privacy
The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children.
11. International Data Transfers
Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for international data transfers.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Last updated" date at the top indicates when the policy was last revised.
13. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us: