Privacy Policy

1. Data Controller

Augself is the data controller responsible for your personal data. For any privacy-related inquiries, please contact us at:

Email: privacy@augself.ai

2. Information We Collect

2.1 Account Information

• Email address (required for account creation)
• Full name (optional)
• Password (stored securely using bcrypt hashing)

2.2 Content You Provide

• Documents you upload to train your digital twin
• Twin configuration (name, bio, personality settings)
• Chat conversations between visitors and your twin

2.3 Payment Information

Payment processing is handled by Stripe. We do not store your credit card details. We receive only confirmation of payment status and Stripe customer ID.

2.4 Usage Data

• Chat message counts and usage statistics
• Login timestamps
• Feature usage patterns

3. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Process your digital twin's responses using AI
• Process payments and manage subscriptions
• Send important service notifications
• Improve our Service based on usage patterns
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

We process your data based on:

• Contract: Processing necessary to provide the Service you requested
• Legitimate Interest: Improving our Service and ensuring security
• Legal Obligation: Compliance with applicable laws
• Consent: Where explicitly provided for optional features

5. Data Sharing and Third Parties

We share data with the following third parties:

5.1 AI Providers

To generate AI responses, we send relevant document content and chat messages to:

• OpenAI (for GPT models)
• Anthropic (for Claude models)

These providers process data according to their respective privacy policies and data processing agreements.

5.2 Payment Processing

Stripe processes all payments. Your payment information is handled directly by Stripe under their Privacy Policy.

5.3 Infrastructure

Our Service is hosted on Railway, which provides secure cloud infrastructure.

6. Data Retention

• Active accounts: Data retained while your account is active
• Deleted accounts: 30-day grace period, then permanent deletion
• Chat logs: Retained until you delete them or your account
• Payment records: Retained as required by law (typically 7 years)

7. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of your personal data
• Restriction: Request limitation of processing
• Portability: Receive your data in a portable format
• Objection: Object to certain processing activities
• Withdraw Consent: Where processing is based on consent

To exercise these rights, contact us at privacy@augself.ai. We will respond within 30 days.

8. Self-Hosted Deployments

For self-hosted deployments, your data remains entirely on your own infrastructure. The only data transmitted to Augself is:

• License key validation requests (license key and instance ID)

No document content, chat messages, or personal data is transmitted to our servers in self-hosted mode.

9. Data Security

We implement appropriate security measures including:

• Encryption of data in transit (HTTPS/TLS)
• Secure password hashing (bcrypt)
• Regular security updates and monitoring
• Access controls and authentication

10. International Data Transfers

Your data may be processed in countries outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Data processing agreements with all third-party providers

11. Cookies

We use essential cookies for authentication and session management. We do not use tracking or advertising cookies. Essential cookies cannot be disabled as they are necessary for the Service to function.

12. Children's Privacy

Our Service is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service. The "Last updated" date at the top indicates the most recent revision.

14. Supervisory Authority

If you are in the EEA or Switzerland and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority.

For Switzerland: Federal Data Protection and Information Commissioner (FDPIC)

15. Contact Us

For any questions about this Privacy Policy or our data practices:

Email: privacy@augself.ai