Privacy Notice
This pre-launch draft describes the product as currently designed. It must be reviewed against the final legal entity, production providers and launch jurisdictions before accepting real customer payments.
What we collect
For a guest Process Transformation Report we may collect your email address, process name, organization/industry context, the process description you submit, optional operational metrics and any other context you choose to provide. Payment details are handled by the payment provider; AI-ssistant is not designed to store full card details.
How process data is used
Submitted process information is used to reconstruct the current-state process, assess transformation opportunities, generate the purchased report, render downloadable files, deliver the secure report link and operate abuse/security controls. Do not submit passwords, payment-card data, national identification numbers, medical information or other sensitive personal data unless it is genuinely necessary and permitted for the intended analysis.
AI processing
The free readiness preview is designed to use deterministic analysis without a paid external AI call. After payment, the full report may be processed by the configured AI model/provider to improve analysis quality and report language. Production subprocessors and processing locations will be listed before launch. AI instructions treat submitted process text as untrusted business content rather than instructions to the model.
Retention
Guest report links currently expire after the configured access period, initially 30 days. After expiry, the product is designed to remove or minimize the guest email, process description, contextual inputs, report JSON and generated PDF/DOCX objects. Accounting/payment records may be retained separately where required for legitimate accounting, tax, fraud-prevention or legal obligations.
Security
Guest report access uses high-entropy access tokens stored as hashes and separately signed email links. Production controls include HTTPS, secure cookies where accounts are used, private object storage, rate limiting, request correlation, restricted internal services and payment-webhook signature verification.
Deletion
A valid guest report link includes a control to permanently delete the report source data and generated report files before the normal expiry date. Organization accounts have separate retention, export and deletion controls.
International processing
Because AI-ssistant is intended for international customers, infrastructure or subprocessors may process data outside the customer’s country. The final production notice must identify the seller, subprocessors and applicable cross-border safeguards.
Your rights and contact
For privacy questions or requests concerning access, correction or deletion, contact contact@ai-ssistant.store. Rights differ by jurisdiction.