01
Scope and responsible company
This Privacy Policy explains how INTIGNAI LLC, a Utah limited liability company, collects, uses, discloses, and protects personal information through intignai.com, intignai.dev, authorized INTIGNAI and ARBITER domains, Centaur workspaces, controlled workflows, demonstrations, payment flows, support, and related services.
A separate order, data processing agreement, or customer-controlled policy may apply when INTIGNAI processes personal information on behalf of a business Customer. In that role, the Customer determines the purposes and instructions for processing, and individuals should direct requests to that Customer first where appropriate.
02
Information we collect
We collect information you provide, information generated through use of the Services, and limited information from service providers or integrations you authorize.
- Identity and contact information, including name, organization, role, email address, phone number, and account identifiers.
- Commercial information, including selected offers, quotes, subscription state, invoices, payment status, refunds, disputes, and entitlement records. Full card details are handled by Stripe and are not stored by INTIGNAI.
- Workspace and Customer Content, including goals, notes, tasks, contacts, opportunities, prompts, files, decisions, approval records, policies, requests, outputs, workflow details, and export records.
- Authentication and access information, including sign-in events, memberships, named seats, roles, invitations, and account-recovery records.
- Technical and usage information, including device and browser data, IP-derived security signals, request metadata, logs, error reports, page interactions, and analytics.
- Integration and execution records, including provider identifiers, connector status, action requests, scoped grants, receipts, verification results, revocations, and incident evidence. Secrets and credentials should only be submitted through an approved protected path.
- Support, legal, and onboarding communications, including inquiries, Control Maps, demonstrations, feedback, deletion requests, and records needed to resolve an issue.
03
How we use information
We use personal information to provide, personalize, secure, support, and improve the Services; create and manage accounts and workspaces; prepare Customer-requested outputs; verify payments and entitlements; operate approval and receipt controls; communicate about service, billing, security, and legal matters; prevent fraud and abuse; maintain records; comply with law; and establish, exercise, or defend legal claims.
We may use aggregated or de-identified information to understand system performance, product demand, workflow patterns, and service quality, provided it is not used to identify an individual. We do not sell personal information or Customer inquiry data.
04
AI systems, prompts, and outputs
The Services may route prompts, Customer Content, context, or derived data to models operated by INTIGNAI or approved third-party providers. The exact providers, retention behavior, and model-routing boundary may vary by product, workspace configuration, and Customer-selected connector.
INTIGNAI does not use private Customer Content to train a public model unless the applicable order or a separate affirmative choice expressly permits it. We may retain prompts, outputs, evaluations, and execution receipts when needed to provide the Service, preserve workspace memory, investigate errors, enforce policy, or meet audit and legal requirements.
05
Payments and commercial records
Stripe processes payment methods and checkout information under its own privacy terms. INTIGNAI receives transaction identifiers, Customer identifiers, selected products, amounts, currency, payment and subscription status, billing contact information, refunds, disputes, and related metadata needed to verify payment and manage access.
We maintain versioned legal-acceptance receipts showing the policy bundle, commercial disclosure, acceptance context, timestamp, account or email subject, and privacy-preserving request and browser fingerprints. These records help prove consent, resolve billing issues, and prevent unauthorized changes.
06
How information is disclosed
We disclose information only as reasonably necessary to operate the Services, follow Customer instructions, complete a transaction, protect the platform, comply with law, or complete a business transaction subject to appropriate safeguards.
- Hosting, database, identity, analytics, communications, payment, model, security, observability, and support providers acting for INTIGNAI.
- Customer-authorized integrations, providers, team members, approval owners, or workspace participants.
- Professional advisers, auditors, insurers, financing sources, and transaction counterparties subject to confidentiality obligations.
- Government authorities, courts, or other parties when required by law or reasonably necessary to protect rights, safety, systems, evidence, or the public.
07
Cookies, analytics, and local storage
We use essential cookies and browser storage for authentication, security, session continuity, preferences, and protected workspace operation. We use Vercel Analytics and may use similar privacy-conscious telemetry to understand aggregate page performance and usage. We do not currently operate third-party behavioral advertising on the Services.
Browser and device controls may limit optional analytics, but essential authentication and security storage is required for protected workspace access.
08
Retention and deletion
We retain information for as long as needed to provide the Service, maintain workspace memory selected by the Customer, complete transactions, preserve approvals and receipts, support recovery, prevent fraud, meet accounting and legal obligations, and resolve disputes. Retention varies by data type, product configuration, Customer instruction, backup cycle, and legal requirement.
Deletion from an active interface may not immediately remove information from backups, immutable receipts, fraud records, security evidence, legal holds, or accounting records. We minimize retained information and restrict its use when immediate deletion is not appropriate. Customers should export needed information before account or workspace termination.
09
Security
We use administrative, technical, and organizational safeguards designed to protect information, including access boundaries, authentication, encryption in transit, role controls, environment separation, logging, scoped execution, approval gates, and reviewable receipts where applicable. No system can guarantee absolute security, availability, or prevention of every unauthorized act.
Do not send passwords, private keys, broker credentials, regulated records, or sensitive third-party data through a public inquiry. Report suspected compromise promptly through the support or legal request path.
10
International processing
INTIGNAI and its providers may process information in the United States and other countries where they operate. Those locations may have different data-protection laws. Where required, INTIGNAI will use contractual or other lawful transfer safeguards appropriate to the applicable service relationship.
11
Your choices and rights
Depending on location and relationship, individuals may have rights to request access, correction, deletion, portability, restriction, objection, or information about disclosures. We may verify identity, authority, workspace ownership, and the applicable legal basis before acting. Some requests may be limited by Customer instructions, security needs, legal obligations, immutable transaction or execution evidence, or the rights of others.
You may update certain account and workspace information directly, cancel subscriptions under the Cancellation & Refund Policy, and request privacy review through the INTIGNAI request path using the topic "Privacy request." We do not discriminate for exercising applicable privacy rights.
12
Children
The commercial Services are not directed to children under 13, and paid accounts must be accepted by a person at least 18 years old. A parent, guardian, school, or business Customer must provide any required authorization before using a product with a minor. Contact INTIGNAI if you believe a child submitted personal information without appropriate permission.
13
Changes and contact
We may update this Policy to reflect product, provider, legal, or operational changes. Material changes will receive a new version and effective date and may require renewed acceptance for active accounts.
Privacy questions and rights requests may be submitted through the INTIGNAI request path with the topic "Privacy request." Include the account email, relevant workspace, request type, and enough information for verification, but do not include passwords or private credentials.