Privacy Policy

1. Information We Collect

When you interact with AuromindAI services, platforms, and autonomous swarms, we may collect the following categories of information:

• Account & Profile Data: Name, business email, organization name, phone number, and billing details when signing up.
• Inbound Channel Telemetry: Customer messages submitted via WhatsApp Business API, SMS, website chat widgets, or webhook endpoints configured on your account.
• Operational Metadata: IP addresses, browser types, session timestamps, latency logs, and autonomous agent tool execution records for auditing and security purposes.
• Integration Credentials: Encrypted OAuth tokens and API secrets (e.g. Shopify, PostgreSQL, Google Calendar, HubSpot) required to execute autonomous business tasks on your behalf.

2. How We Use Your Information

We process collected data strictly to execute agreed-upon autonomous workflows and deliver contractual enterprise services:

3. Data Encryption & Cryptographic Controls

Security is engineered directly into our infrastructure architecture:

• Data in Transit: Encrypted using TLS 1.3 with Perfect Forward Secrecy (PFS) and strict HSTS headers across all public and internal service boundaries.
• Data at Rest: Encrypted using AES-256 GCM. Encryption keys are managed via AWS Key Management Service (KMS) or dedicated Hardware Security Modules (HSM).
• Database Row-Level Security (RLS): Multi-tenant segregation ensures that tenant data is cryptographically and logically isolated from other accounts.

For deeper architectural details, please review our comprehensive Data Encryption & Security Architecture document.

4. Sub-Processors & Third-Party Services

AuromindAI engages vetted enterprise sub-processors to assist in infrastructure hosting, database storage, and AI inferencing. All sub-processors are subject to rigorous Data Processing Agreements (DPAs) with strict confidentiality and security warranties:

5. Your Rights Under GDPR, CCPA & Global Frameworks

Depending on your jurisdiction, you have statutory rights regarding your personal data:

• Right to Access: Request a complete copy of personal records held by AuromindAI in a structured JSON format.
• Right to Erasure (Right to be Forgotten): Request the permanent deletion of your account, conversation transcripts, and indexing data.
• Right to Rectification: Update or correct inaccurate personal or business details.
• Right to Restrict Processing: Suspend autonomous processing or revoke third-party API tokens at any time.
• Right to Opt-Out of Automated Profiling: Configure mandatory Human-in-the-Loop approval for any sensitive agent decision.

6. Data Retention & Deletion

We retain your operational data only for as long as your account is active or as required by statutory accounting and legal obligations. Upon termination of service, all tenant databases, vector embeddings, and temporary credentials are cryptographically scrubbed within thirty (30) business days.

7. Contact Our Data Protection Officer (DPO)

For privacy inquiries, Data Protection Agreements (DPA), or to exercise your GDPR/CCPA rights, please contact our dedicated security team: