سياسة الخصوصية

1. What we collect

We collect only what we need to run the service:

• Account details: your name, email address, sign-in method and security settings such as a second step for sign-in.
• Company workspace content: what you and your team write to the crew, files you upload, the records and applications built for you, and the decisions you record.
• Billing details: your plan, payment status and invoices. Card details go to our payment provider and are not stored by us.
• Usage and security records: when you sign in, what actions were taken in the workspace, device and browser details, and errors, so we can keep the service safe and working.
• Messages to us: support requests and anything you send us.
• Website analytics, only if you accept it: which pages of our website and workspace were visited and roughly from where (see Website analytics).

2. How we use it

We use data to provide and secure the service, to run the AI work you ask for, to bill you, to support you, to improve reliability, and to meet legal duties.

We do not sell your data and we do not use your workspace content to advertise to you.

3. AI processing

To do your work, the content the crew needs is sent to the AI model provider we use, Anthropic, which processes it to return a result and also runs the isolated work environment described below. We choose providers whose terms do not allow training on customer content. Questions about AI processing: privacy@baritaai.com.

AI processing may take place outside the location where your company data is stored. The crew is given only what it needs for the task, and it works within the permissions of your workspace.

The kinds of outside access the crew may use while working are: our AI model providers; an isolated work environment, run by a provider, where the crew can run tools, code and skills and which may be connected to the internet; and web search and the reading of public web pages. Content the crew needs for a task can reach these, and a search or a page request can contain parts of that content. They operate in places we do not control and that can be outside the location you chose for your data.

We therefore do not claim strict data residency for AI processing, the isolated work environment or web access. The location you choose governs where we store your company’s records and files, not where this work is done. Companies with a rule that their content must never leave a place should tell us before they rely on the service.

4. Where your data is kept

Your company’s data is stored on Google Cloud. You choose where when you set it up. Offered today: United States and Europe, with United States as the default. Other locations are available on request. The location applies to stored records and files; it does not apply to AI processing, the isolated work environment or web access (see AI processing). Account and billing records may be kept in the platform’s main location.

Your company’s data is separated from every other company’s: access is checked on every request against your workspace and your permissions.

5. Who else handles it (sub-processors)

We use a small number of service providers (sub-processors) to run the service. Each handles only what its part of the service needs:

• Google Cloud (Google, including Firebase): hosting of the website and the workspace, the database, file storage, sign-in, and the service’s logs. Your company’s records and files are stored in the location you chose.
• Anthropic: AI processing of what the crew works on, and the isolated work environment. This processing may take place outside the location you chose for your data (see AI processing).
• Resend: delivery of the emails the service sends, such as invitations, sign-in and account emails, and notices.
• Paddle: payments, subscriptions, top-ups, taxes and invoices. Card details go to Paddle and are not stored by us.
• Google Analytics: website and workspace analytics, only if you accept analytics (see Website analytics).
• Web search and the public sites the crew reads: the operators of those services can see the requests made.

6. How long we keep it

We keep workspace content while your workspace is open. When you close it we delete it (ask us for a copy first if you want one). We keep billing and security records as long as the law or a legitimate need requires.

7. Your choices and rights

Workspace owners control who is a member, what each person can do, and what the crew may act on. Depending on where you live you may have the right to see, correct, export or delete your personal data, to object to some uses, and to complain to your data protection authority.

To use a right, write to privacy@baritaai.com. Where we are your processor and the request concerns your company’s content, we will help the workspace owner respond.

8. Website analytics

If you accept analytics, BARITA AI uses Google Analytics to count visits to its website and workspace pages and to see which pages help people. Nothing is loaded or sent before you accept, and Google’s consent mode keeps advertising storage, advertising data and personalisation turned off at all times.

What is sent: the kind of page you opened (for example “/pricing” or “/app/apps/:applicationId”, never the actual address, its ids, codes or search terms), the site you came from (its domain only), and the technical details Google Analytics collects with every visit, such as browser, device type, approximate location derived from your IP address, and a random identifier stored in a first-party cookie (_ga). We never send your name, email address, company, account id or anything you type, and Google signals and ad personalisation are turned off.

Applications built on the platform and the people who use them are never measured.

Your choice: you can accept or decline in the banner, and change it at any time with “Cookie settings” in the site footer, the workspace account menu, or the button in this section. Declining after accepting stops measurement at once and removes the analytics cookies. Google processes this data as our service provider; see Google’s privacy policy for how Google handles it.

9. Cookies

We use the cookies and browser storage the service needs, and analytics cookies only if you accept them; see the Cookie notice (https://baritaai.com/cookies).

10. Children, changes and contact

BARITA AI is for businesses and is not directed at children.

We will tell you about material changes to this policy before they apply. Contact: privacy@baritaai.com.