Privacy Policy

Introduction

Inteliworks ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI automation platform and related services ("Service").

Please read this Privacy Policy carefully. By using our Service, you consent to the data practices described in this policy.

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily provide, including:

• Account Information: Name, email address, password, company name, job title
• Profile Information: Profile photo, bio, preferences, settings
• Payment Information: Credit card details, billing address (processed by Stripe)
• Communication Data: Messages, support tickets, feedback, survey responses
• User Content: Data you input into AI agents, configurations, templates
• Integration Data: Credentials and data from connected third-party services

1.2 Information Collected Automatically

When you use our Service, we automatically collect:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, clicks, time spent, referring URLs
• Log Data: Access times, error logs, API calls, agent execution logs
• Cookies: Session cookies, preference cookies, analytics cookies (see Cookie Policy)

1.3 Information from Third Parties

We may receive information from:

• OAuth Providers: Google, Microsoft (name, email, profile picture)
• Payment Processors: Stripe (payment status, transaction history)
• Integrated Services: Data from services you connect to your account
• Partners: Referral information from agency partners

2. How We Use Your Information

We use collected information for the following purposes:

2.1 Provide and Improve Service

• Create and manage your account
• Process AI agent requests and deliver outputs
• Process payments and manage subscriptions
• Provide customer support and respond to inquiries
• Improve and optimize our Service and AI models
• Develop new features and functionality

2.2 Communications

• Send transactional emails (receipts, password resets, account updates)
• Send product updates and service announcements
• Send marketing communications (with your consent)
• Respond to your requests and support tickets

2.3 Security and Compliance

• Detect, prevent, and address fraud and abuse
• Monitor for security threats and vulnerabilities
• Enforce our Terms of Service and policies
• Comply with legal obligations

2.4 Analytics and Research

• Analyze usage patterns and trends
• Measure the effectiveness of our Service
• Conduct research to improve AI capabilities
• Generate aggregated, anonymized insights

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process personal data based on:

• Contract Performance: Processing necessary to provide our Service
• Legitimate Interests: Improving our Service, preventing fraud, marketing to existing customers
• Legal Obligations: Compliance with applicable laws
• Consent: Marketing communications, cookies, optional features

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information with:

4.1 Service Providers

Third parties who perform services on our behalf:

• Cloud Infrastructure: Ionos VPS, Supabase, AWS
• Payment Processing: Stripe
• Email Services: SendGrid, Resend
• Analytics: Google Analytics, Mixpanel
• AI Providers: OpenAI, Anthropic, Groq (for AI processing)
• Support Tools: Intercom, Zendesk

4.2 Business Partners

• Agency partners (for clients you manage through them)
• Integration partners (with your authorization)

4.3 Legal Requirements

We may disclose information when required to:

• Comply with legal process or government requests
• Protect our rights, privacy, safety, or property
• Enforce our Terms of Service
• Respond to emergency situations

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change.

5. Data Retention

We retain your information for as long as necessary to:

• Provide our Service and maintain your account
• Comply with legal obligations (e.g., tax records: 7 years)
• Resolve disputes and enforce agreements
• Improve our Service through aggregated analysis

After account deletion, we retain certain data for up to 90 days for recovery purposes, after which it is permanently deleted or anonymized.

5a. Digital Business Card Analytics

If you own a digital business card, we count engagement on your behalf so you can see whether it is working. You are the controller of that data and we are the processor. This is the complete list of what is collected:

• Four counts: card views, contact saves, outbound link clicks, and QR scans
• A date, not a time: counts are bucketed by day, so the finest granularity we ever store is "that day"
• A device category: iOS, Android, desktop, or other
• A daily visitor code: a salted, truncated, daily-rotating hash, used only to tell repeat opens apart from distinct ones within a single day

What we deliberately do not collect or keep:

• No IP addresses are stored. A visitor's address is used in the moment to derive the daily visitor code and the device category, then discarded. There is no column for it.
• No location. Not country, not region, not timezone as a proxy for either.
• No cross-card or cross-site tracking. The daily visitor code is salted with both the card and the day, so it cannot be used to recognise someone on a second card, or on the same card tomorrow.
• No device fingerprinting, no behavioural scoring, and no advertising use.

Retention: 90 days. Card analytics older than 90 days are deleted automatically by a scheduled job — this window is enforced in code, not just stated here.

6. Data Security

We implement industry-standard security measures including:

• Encryption: TLS 1.3 for data in transit, AES-256 for data at rest
• Access Controls: Role-based access, multi-factor authentication
• Infrastructure: Enterprise-grade cloud providers
• Monitoring: 24/7 security monitoring and logging
• Secure Development: Regular security audits and penetration testing

While we strive to protect your data, no method of transmission or storage is 100% secure. Please use strong passwords and protect your account credentials.

7. Your Rights

Depending on your location, you may have the following rights:

To exercise these rights, contact us at privacy@inteliworks.io or use the settings in your account dashboard.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States. We ensure appropriate safeguards are in place:

• Standard Contractual Clauses approved by the European Commission
• Data Processing Agreements with all sub-processors
• Compliance with applicable data protection frameworks

9. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page
• Updating the "Last updated" date
• Sending email notification for significant changes

We encourage you to review this policy periodically.

11. Contact Us

For questions about this Privacy Policy or our data practices, contact our Data Protection Officer:

• Email: privacy@inteliworks.io
• Website: inteliworks.io/contact
• Registered: Delaware, USA

For GDPR-related inquiries, you may also contact our EU Representative at: eu-representative@inteliworks.io

12. Additional Disclosures

California Residents (CCPA)

California residents have additional rights under the CCPA. Please see our CCPA Notice for details.

European Residents (GDPR)

EU/EEA residents have additional rights under the GDPR. Please see our GDPR Compliance page for details.