Privacy Policy

Last Updated: December 5, 2025

1. Introduction

Exalt AI ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our AI automation services, including "RAG as a Service," AI Agents, and custom development solutions (collectively, the "Service").

2. Information We Collect

We collect information in three distinct categories:

A. Account & Billing Information (You as our Client)

  • Identity Data: Name, email address, business name, and job title.
  • Financial Data: Payment card details and billing history. Note: We use Stripe for payment processing. We do not store full credit card numbers on our servers; this data is tokenized and stored securely by Stripe.
  • Technical Data: IP address, browser type, and device information used to access our dashboard.

B. "RAG" & Knowledge Base Data (Your Business Data)

  • Uploaded Documents: Files (PDFs, docs, text) you upload for Retrieval-Augmented Generation (RAG).
  • Vector Embeddings: We convert your uploaded documents into mathematical representations ("vector embeddings") stored in our secure vector database. These are used strictly to retrieve relevant context for your AI queries.
  • API Usage: Logs of queries sent to our API and the AI-generated responses.

C. AI Agent Permissions (Action Data)

  • Integrations: If you authorize our AI Agents to act on your behalf (e.g., "Read my emails," "Update my CRM"), we collect the authentication tokens necessary to perform those specific actions.
  • Action Logs: We maintain a log of actions taken by our Agents (e.g., "Email sent to [Address] at [Time]") for auditing and debugging purposes.

3. How We Use Your Information

  • To Provide Services: Processing your prompts, retrieving data from your knowledge base, and executing agent commands.
  • To Improve Our Models (Limited): We generally do not use your proprietary business data or RAG uploads to train our internal foundational models without your explicit consent.
  • Fraud Prevention: We use Stripe and internal tools to detect and prevent fraudulent transactions or abusive AI usage.

4. Sharing Your Data (Third-Party Sub-Processors)

We do not sell your data. To provide our Service, we share data with trusted third-party infrastructure providers:

  • AI Model Providers: We transmit your anonymized prompts and relevant RAG context to major AI providers (e.g., OpenAI, Anthropic, Google) to generate responses. These providers are contractually obligated not to use your API data to train their public models.
  • Payment Processors: Stripe processes your payments. Their use of your personal information is governed by their privacy policy.
  • Cloud & Vector Storage: We use secure cloud providers to store your encrypted documents and vector embeddings.

5. "RAG as a Service" Specifics

  • Data Isolation: Your vector embeddings are logically isolated from other clients. Your knowledge base is never accessible to other users of Exalt AI.
  • Deletion: When you delete a document from your dashboard, the associated vector embeddings are removed from our database.
  • Accuracy Disclaimer: While we use advanced retrieval techniques, RAG systems can occasionally retrieve incorrect context. You are responsible for verifying AI outputs.

6. Data Retention

  • Account Data: Retained as long as your account is active.
  • RAG Data: Retained until you delete it or terminate your subscription.
  • Chat Logs: Retained for 30 days to allow you to view history, after which they are anonymized or deleted.

7. Your Rights

You have the right to access, correct, or delete your personal data.

  • To delete RAG data: Use the "Delete Knowledge Base" function in your dashboard.
  • To delete Account data: Contact us at our support email.

8. International Transfers

Your data may be processed in the United States or other locations where our AI providers operate. By using our Service, you consent to this transfer.

9. Cookies and Tracking

We use essential cookies for authentication (provided by Clerk) and payment security (provided by Stripe). We may use analytics tools to understand usage patterns, but you can opt out of non-essential tracking via your browser settings.