Privacy Policy

2. Information We Collect

We collect both personal and non-personal data when you interact with our Website and Services.

a. Information You Provide to Us

• Account Information: Name, email address, and password
• Authentication: Public profile and email address via Google OAuth (if used)
• Customer Support: Contact info and details from support inquiries
• Payment Data: Processed by Stripe (we do not store card numbers)
• Integration Credentials: When connecting third-party services, we collect access tokens, client IDs, secrets, and related metadata

b. Automatically Collected Data

• Device & Technical Info: IP address, device type, browser, OS
• Usage Info: Pages visited, features used, and user flow
• Cookies & Analytics: As described in Section 7

c. Data from Other Sources

• Analytics Platforms (e.g., Google Analytics, PostHog)
• AI/LLM Providers (e.g., OpenAI, Anthropic) for query assistance
• Auth Providers (e.g., Supabase)

3. How We Use Your Personal Data

We may use your data to:

• Deliver and maintain the Services
• Authenticate logins and secure access
• Provide personalized insights and recommendations
• Improve platform functionality and user experience
• Process payments securely through third-party providers
• Communicate with you about updates and offers
• Comply with legal and regulatory obligations

Marketing emails can be opted out of via email footer or request.

4. Use of Artificial Intelligence and Machine Learning

To enhance recommendations, search functionality, and user interactions, we use third-party AI and LLM models. We may send anonymized or context-specific query data to external providers strictly to fulfill user requests.

• We do not train generalized AI models on your personal data
• We limit usage of AI to user-facing features initiated by you
• All data passed to LLMs is protected by encryption in transit

5. How We Share Personal Data

We do not sell your personal data. However, we may share it with trusted third parties who help us operate, maintain, and improve our Services. These include service providers that support functionality such as hosting, analytics, payment processing, customer support, and AI-powered features.

We may also share your data:

• To comply with legal obligations or respond to lawful requests
• In connection with a business transaction, such as a merger or acquisition
• In anonymized or aggregated form for statistical or research purposes

6. Your Privacy Rights

You may:

• Request access to your data
• Correct inaccurate personal data
• Request deletion of your data
• Withdraw consent or object to processing

To exercise your rights, email us at legal@profithero.ai

7. Cookies and Tracking Technologies

We use cookies to:

• Authenticate sessions
• Remember preferences
• Analyze traffic and user engagement

You can modify your cookie preferences in your browser settings or use opt-out tools provided by analytics services.

8. Data Retention

We retain personal data only as long as needed to:

• Deliver services and features
• Comply with legal or regulatory requirements
• Prevent fraud and maintain platform integrity

When data is no longer needed, we securely delete or anonymize it.

9. Security Practices

We take reasonable steps to protect your data, including:

• Encryption at rest and in transit
• Secure credential vaults for integrations
• Role-based access controls
• Activity logging and access auditing
• Regular vulnerability scanning and patching

Despite these measures, no online service is 100% secure. Please use strong passwords and protect your credentials.

10. Children's Privacy

Our services are intended for users 18 years and older. We do not knowingly collect data from children. If we learn a child has submitted personal information, we will delete it promptly.

11. Third-Party Websites

We may link to external websites or services. We are not responsible for their privacy practices. Please review their policies before engaging.

12. Changes to This Policy

We may update this Policy from time to time. Updates will be posted here with a revised effective date. Material changes will be communicated via email or a website notice.