Last updated: Nov 20th, 2024
1. Introduction
Welcome to Squadra.ai ("we," "us," or "our"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy outlines how we collect, use, store, and protect your information when you use our platform or services in compliance with the General Data Protection Regulation (GDPR) and French data protection laws.
2. Data Controller
The data controller responsible for your personal data is:
Squadra.ai
Email: privacy@squadra.ai
Contact Person: Jonathan Bourguignon
Admin Users are individuals who log into the Squadra platform to configure, deploy, and monitor AI agents.
3. Types of Data Collected
We distinguish between two categories of users:
3.1 Admin Users
- Personal Identification Information: Name and email address.
- Usage Data: Information about how you use our platform.
- Agent Configuration Data: Data inputted to operate agents (e.g., knowledge bases, prompts).
3.2 End Users
End Users are individuals who interact with AI agents deployed by third parties using Squadra.
- Unstructured Data: Conversations and interactions with AI agents.
- Usage Data: Collected via analytics tools to understand user behavior and satisfaction.
Note: We do not directly store personal data from End Users unless specified. Admin Users are responsible for ensuring that their collection and processing of End Users' data comply with applicable laws and that they provide appropriate privacy notices and obtain necessary consents.
3.3 Special Categories of Personal Data
We do not collect any special categories of personal data (e.g., health data, biometric data, data revealing racial or ethnic origin).
4. Purposes of Data Processing
We process personal data for the following purposes:
- Service Delivery: To provide, maintain, and improve our services.
- Analytics: To analyze usage patterns to enhance user experience.
- Marketing: To send promotional communications, subject to your preferences.
- Security: To protect our platform and users from security threats.
5. Legal Basis for Processing
5.1 Admin Users
- Performance of a Contract: Processing is necessary for the performance of the Terms & Conditions you agree to upon signing up.
- Legitimate Interests: For improving our services and ensuring security.
5.2 End Users
- Consent: Processing is based on the consent provided to the Admin Users who deploy the agents. Admin Users are responsible for obtaining and managing this consent.
5.3 Cookies and Analytics
- Consent: We obtain your consent for the use of cookies and similar tracking technologies as required.
6. Data Retention
- Structured Data: Retained for three (3) months.
- Unstructured Data (e.g., conversations): Retained for one (1) year.
- After the retention period, data is securely deleted or anonymized.
7. Data Sharing and Transfers
7.1 Third-Party Service Providers
We may share your data with third parties for the following purposes:
- Cloud Infrastructure: Google Cloud Platform (GCP) for data storage and hosting.
- AI Model Providers: OpenAI and other LLM API providers for AI functionalities. These providers have terms and policies that meet or exceed our standards for data protection.
- Analytics Services: Tools like Google Analytics to understand user behavior (not currently in use but may be implemented in the future).
7.2 International Data Transfers
Personal data may be transferred outside the European Economic Area (EEA) when using certain AI models:
- Safeguards: We use Standard Contractual Clauses and ensure that providers offer adequate data protection measures.
- Responsibility of Admin Users: If an Admin User selects an AI model that stores data outside the EEA, they are responsible for informing their End Users and ensuring compliance with data protection laws.
8. Data Subject Rights
Under GDPR, you have the following rights:
- Access: Obtain confirmation about whether your data is being processed and access your personal data.
- Rectification: Request correction of inaccurate personal data.
- Erasure: Request deletion of your personal data under certain conditions.
- Restriction: Request the restriction of processing your personal data.
- Data Portability: Receive your personal data in a structured, commonly used format.
- Objection: Object to processing based on legitimate interests.
- Withdraw Consent: Withdraw your consent at any time for processing based on consent.
To exercise these rights, please contact us at privacy@squadra.ai.
9. Security Measures
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Access to personal data is restricted to authorized personnel, including our CTO.
10. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Enhance User Experience: Remember your preferences and settings.
- Analytics: Collect information about how you use our platform to improve our services.
You will be informed about the use of cookies and asked for consent where required when these features are implemented.
11. Processing of Children's Data
Our services are not intended for individuals under the age of 16. We do not knowingly collect data from children. If you become aware that a child has provided us with personal data, please contact us at privacy@squadra.ai.
12. Automated Decision-Making and Profiling
We may use automated processes to:
- Assess Potential Revenue: Estimate which Admin Users represent a high potential for revenue by analyzing company or organization information provided during sign-up.
These processes do not have legal or similarly significant effects on individuals.
13. Updates to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be communicated via email and updated on our website at https://app.squadra.ai. We encourage you to review this policy periodically.
14. Contact Information
If you have any questions, concerns, or comments about this Privacy Policy, please contact us at:
Email: privacy@squadra.ai
Contact Person: Jonathan Bourguignon
