Privacy Policy

Introduction

We at Sansa AI, Inc. ("Sansa," "we," or "us") respect your privacy and work to keep secure any information you share with us. This privacy policy ("Privacy Policy") explains how we collect, use, disclose, and process your personal data when you use Sansa's software, platform, APIs, the ngram desktop application, documentation, and related tools, including the websites at sansaml.com and trysansa.com (the "Service"). It also tells you how you can access and update your personal information and describes the data protection rights that may be available under your country's or state's laws. Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge you have been informed of and consent to our practices with regard to your personal information and data.

This Privacy Policy does not apply where Sansa acts as a data processor and processes personal data on behalf of customers. This includes when a customer uses our API to provide its own products or services to its users, and when an organization provides you with access to the Service under a separate agreement with us. In those cases, the customer's own privacy policy and its agreement with us govern that data. If you are a user of a product built on the Service, please contact the provider of that product with any questions.

1. Personal data we collect

We collect the following categories of personal data:

A. Personal data you provide to us directly

Account Information: We collect identifiers, such as your name, email address, and company name, when you sign up for a Sansa account or to receive information about our Service. If you sign in with a third-party account, such as Google, we receive basic profile information from that provider.

Payment Information: If you purchase paid products or services, our payment processor collects your payment information. We receive limited details, such as your billing address and the last digits and expiry of your card.

Inputs and Suggestions: The Service allows you to submit content ("Inputs"), which generate responses ("Suggestions") based on your Inputs. Inputs include prompts and messages you send, and, when you use the desktop application, code, files, terminal output, and other context from your workspace that the application sends to provide AI features. If your Inputs include personal data or reference external content, we will collect that information and it may be reproduced in the Suggestions we provide.

Communication Information: If you communicate with us, we collect your name, contact information, and the contents of any messages you send.

Feedback: While using the Service, you may provide feedback, including bug reports, ideas, and ratings of a Suggestion ("Feedback"). If you provide Feedback, we may store the related conversation, logs, and other information you choose to include with it.

B. Personal data we receive from your use of the Service

When you use the Service, we also receive certain technical data automatically. This includes:

Device Information: Your device or browser sends us information about when and how you install, access, or use our Service. This may include your device type, hardware and operating system information, application version, browser information, and mobile network or ISP.

Log Information: We collect information about how our Service is performing, including your IP address, browser type and settings, request metadata, error logs, and other ways that you interact with the Service.

Usage Data: We collect information about your use of the Service, such as the dates and times of access, the features and models you use, the amount of usage, pages you view, links you click, and other information about how you use the Service.

Cookies & Similar Technologies: We and our service providers use cookies and similar technologies to operate the Service, keep you signed in, remember your preferences, and understand how the Service is used. You can control cookies through your browser settings, but some parts of the Service may not work without them.

Location Information: For security, compliance, and performance reasons, we may determine the general geographic location from which your device accesses our Service using information such as your IP address.

Some information, such as your conversation history and application logs in the desktop application, is stored on your device. It is sent to us when needed to provide a feature or when you choose to send it to us, for example with Feedback.

C. Information we do not collect

Sansa does not knowingly collect sensitive or special category personal information, such as genetic data, biometric data for the purposes of uniquely identifying a natural person, health information, or religious information. Sansa does not knowingly collect information from or direct any of our Service to children under the age of 18. If we learn or have reason to suspect that a user is under the age of 18, we will investigate and, if appropriate, delete the personal data and/or the account.

2. How we use personal data

We may use personal data for the following purposes:

  • To provide and maintain the Service, including optional features that enhance functionality and user experience.
  • To create, manage, and administer your account, including facilitating payments and responding to inquiries.
  • To improve and develop the Service and conduct research, including debugging and identifying or repairing issues that impair functionality.
  • To communicate with you, including sending updates, information about the Service, and events.
  • To prevent, detect, and investigate fraud, abuse, security incidents, and violations of our Terms of Service.
  • To comply with legal obligations and protect the rights, safety, privacy, and property of users, Sansa, or third parties.
  • To investigate and resolve disputes or security issues.
  • To enforce our Terms of Service and other applicable agreements.

Unless you opt out, we may use Inputs and Suggestions to improve the Service, including to develop and train our own models. You can opt out at any time with the product improvement setting in your account, or in your organization's settings if an organization manages your account. Even if you opt out, we may use Inputs and Suggestions that are flagged for security or abuse review, or that you include in Feedback.

We may aggregate or de-identify personal data so that it no longer identifies you, and use that information for the purposes described above, such as analyzing how the Service is used, improving or adding features, and conducting research. We will maintain de-identified information in its de-identified form and will not attempt to reidentify it, except as required by law.

3. How we share personal data

We may disclose your personal data in the following circumstances:

Service Providers and Business Partners: We may disclose personal data to third-party vendors and service providers who support our business operations and help us deliver and improve the Service. This includes AI model providers, hosting and cloud infrastructure, analytics, safety and security, communications, payment processing, and IT providers. These parties process personal data only as necessary to perform services on our behalf, consistent with our instructions and applicable law.

Business Transfers: In the event of a merger, acquisition, restructuring, bankruptcy, or other corporate transaction, personal data may be disclosed to counterparties and advisers as part of due diligence or transferred as part of the transaction.

Legal Compliance and Protection of Rights: We may disclose personal data to government authorities or other third parties if we believe doing so is necessary to: (i) comply with applicable laws, regulations, or legal processes, (ii) respond to lawful requests or investigations, (iii) protect the safety, rights, or property of any person, (iv) prevent fraud, security incidents, or other unlawful activity, (v) enforce our Terms of Service or other legal rights, or (vi) protect Sansa against legal liability.

Affiliates: We may share personal data with affiliates, meaning an entity that controls, is controlled by, or is under common control with, us. They may use personal data in a manner consistent with this Privacy Policy.

Third-Party Services and Integrations: The Service may include integrations with or links to third-party websites, applications, or services, including AI model providers you connect with your own account or key, extensions, and web search and web content services. If you choose to use these, your personal data, including Inputs, may be sent to those third parties directly and is governed by their own terms and privacy policies. Our linking or integrating with a third party does not imply endorsement or affiliation.

Organization Administrators: If you use the Service as a member of an organization, we may disclose account-related information (such as your email address and account status) and information about your use of the Service to that organization. Depending on the organization's settings, its administrators may also be able to access your Inputs and Suggestions.

With Your Consent: We may disclose personal data when you give us permission to do so, including through features of the Service that are designed to share information.

We do not sell your personal data.

4. Retention

Sansa retains your personal data only for as long as necessary to operate and improve the Service and to support legitimate business needs such as legal compliance, safety, dispute resolution, and enforcement of our agreements. The appropriate retention period varies depending on the purpose for which the personal data was collected, its sensitivity, potential risks associated with its use or exposure, and any applicable legal requirements.

Your settings and your organization's settings may also influence how long we keep certain types of data.

When personal data is no longer needed, Sansa and its service providers will follow procedures to delete, erase, de-identify, or anonymize it in compliance with applicable laws.

5. Security

We implement commercially reasonable technical and organizational measures designed to protect personal data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the Internet or method of electronic storage is completely secure. You should use caution when deciding what information to share with the Service, including the files and folders you let the desktop application access. We are not responsible for any circumvention of privacy settings or security features on the Service or on third-party websites linked through the Service.

6. Your rights and choices

Depending on where you live and the laws that apply in your country of residence, you may have certain rights in relation to your personal data. These may include the right to access, delete, correct, or transfer your personal data; to object to or restrict how we process it; or to withdraw your consent where processing is based on consent. You may also have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, you or your authorized agent may contact us at [CONTACT EMAIL]. We may request information to verify your identity before processing your request. If we deny your request, you may appeal by emailing the same address. Sansa will not discriminate against you for exercising any privacy rights available under applicable law.

The rights available to you may include:

  • Right to know what categories of personal data we collect, the purposes for which we use it, and the types of third parties with whom we share it.
  • Access and portability, meaning you can request a copy of the personal data we hold about you and, where applicable, ask us to provide it in a portable format.
  • Deletion of personal data collected from you in connection with your use of the Service, subject to certain exceptions, such as information we must keep for legal, billing, security, or fraud-prevention purposes.
  • Correction of inaccurate personal data we maintain about you. While we will make reasonable efforts to address correction requests, due to the nature of AI models, we cannot guarantee the accuracy of Suggestions generated by the Service.
  • Objection to certain types of processing. Where applicable, we will stop processing unless we have legitimate legal grounds to continue.
  • Restriction of our processing of your personal data in limited circumstances, such as while a correction request is pending.
  • Withdrawal of consent, where the legal basis for our processing is based on your consent. Withdrawal does not affect the lawfulness of prior processing.

You can also manage certain choices directly in the Service, including the product improvement setting, marketing email preferences, and settings in the desktop application that turn individual AI features on or off.

We do not process sensitive personal data for the purposes of inferring characteristics about a consumer.

Sansa processes your personal data for the purposes described in this Privacy Policy on servers located in the United States and other jurisdictions where our service providers operate. While data protection laws vary by country, we apply the protections outlined in this policy to your personal data regardless of where it is processed, and we only transfer data in accordance with legally valid transfer mechanisms. If you are located in the European Economic Area, the United Kingdom, or Switzerland, your personal data will be transferred to the United States and other countries outside those regions, and where it is, we require an adequate level of data protection.

7. Privacy policy changes

We may update this Privacy Policy from time to time. When we do, we will publish an updated version and effective date at the top of this page, unless another type of notice is legally required. Your continued use of the Service after any change in this Privacy Policy will constitute your acceptance of such change.

8. Contacting us

If you have any questions about this Privacy Policy, please contact us at [CONTACT EMAIL] or Sansa AI, Inc., [MAILING ADDRESS].