Privacy Policy - AI Data Stream

Introduction

AI Data Stream ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Information We Collect

Account Information

When you create an account, we collect:

Email address
Name (optional)
Password (hashed and encrypted)
Payment information (processed securely by Stripe)

Connected Platform Data

When you connect analytics platforms (Google Analytics, Search Console, etc.), we access your data in real-time only. We do not store copies of your analytics data on our servers. Each query retrieves fresh data directly from your connected platforms.

AI API Keys

We use a Bring Your Own Key (BYOK) model. Your AI provider API keys are encrypted at rest and never exposed to our staff. Keys are only used to make API calls on your behalf.

Your Content

Content you create (conversations, reports, annotations) is stored in your team's isolated database for your own use. We do not analyze or use this content for any purpose other than providing the service to you.

Security Logs

For security purposes, we log authentication events:

Login and logout times
Failed login attempts
Password resets
IP addresses (for fraud prevention)

How We Use Your Information

We use collected information to:

Provide and maintain our service
Process your transactions
Send service-related communications
Respond to your requests and support inquiries
Improve our service based on usage patterns
Detect and prevent fraud or abuse

Data Storage and Security

Team Isolation

Each team's data (conversations, annotations, reports) is stored in an isolated database. Your data is never mixed with other teams' data.

Encryption

All data transmitted between you and our servers uses TLS encryption
Sensitive data (API keys, OAuth tokens) is encrypted at rest
Passwords are hashed using industry-standard algorithms

Third-Party Services

We use trusted third-party services:

Stripe - Payment processing (PCI-DSS compliant)
Google OAuth - Secure authentication for connected platforms
AI Providers - OpenAI, Anthropic, Google, DeepSeek (your keys, their privacy policies apply)

Data Sharing

We do not sell or share your personal information. The only exceptions:

With your explicit consent
To comply with legal obligations (e.g., court orders)
To protect our rights and prevent abuse

Your analytics data stays between you, your connected platforms, and your chosen AI provider. We have no third-party service providers with access to your data.

Your Rights

You have the right to:

Access - Request a copy of your personal data
Correction - Request correction of inaccurate data
Deletion - Request deletion of your account and data
Export - Team owners can download a full backup of their team data at any time
Revoke Access - Disconnect platforms and revoke OAuth permissions anytime

Data Retention

Active accounts - Data retained while account is active
Cancelled subscriptions - Data retained for 30 days, then deleted
Account deletion - Account and team records are deleted immediately upon request. Associated data files are purged within 7 days.
Legal requirements - Basic account records may be retained if required by law

Cookies

We use essential cookies for:

Session management and authentication
Remembering your preferences (language, currency)
Security (CSRF protection)

We do not use third-party advertising cookies.

Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect personal information from children under 16.

International Data Transfers

Our servers are located in the European Union. If you access our service from outside the EU, your data may be transferred to and processed in the EU.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the service.

Contact Us

For privacy-related questions or to exercise your rights, contact us at:

Email: [email protected]