Privacy Policy

1.1 Information You Provide

• Account Information: Email address, name, and password when you register
• Payment Information: Billing details processed securely through Stripe (we do not store full credit card numbers)
• Content Data: URLs you submit for analysis, keywords you select, and generated articles
• Profile Information: Credit balance, usage history, and account preferences

1.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent on platform, and interaction patterns
• Device Information: Browser type, operating system, IP address, and device identifiers
• Cookies and Tracking: Session cookies, authentication tokens, and local storage data for functionality
• Performance Data: Error logs, system diagnostics, and application performance metrics

1.3 Third-Party Data

When you provide URLs for website analysis, we collect publicly available content from those websites to extract keywords and generate SEO-optimized articles.

2.1 Service Delivery

• Process your article generation requests using AI technology
• Crawl and analyze websites you submit for keyword extraction
• Manage your credit balance and track usage
• Provide access to your generated content and history
• Enable real-time progress tracking for article generation jobs

2.2 Platform Improvement

• Analyze usage patterns to enhance user experience and features
• Train and improve our AI models for better content quality
• Conduct research and development on content generation algorithms
• Monitor system performance and identify technical issues

2.3 Communication

• Send transactional emails (account verification, password resets, payment confirmations)
• Provide customer support and respond to inquiries
• Send service updates, security alerts, and important notifications
• Share optional marketing communications (with your consent)

2.4 Legal Compliance

• Comply with applicable laws, regulations, and legal processes
• Enforce our Terms and Conditions and protect our legal rights
• Prevent fraud, abuse, and security threats
• Respond to law enforcement requests and court orders

3.1 Security Measures

• Encryption: All data transmitted between your browser and our servers is encrypted using TLS/SSL
• Authentication: Secure password hashing and email-based authentication via Supabase Auth
• Database Security: Enterprise-grade PostgreSQL database with row-level security policies
• Payment Security: PCI-DSS compliant payment processing through Stripe
• Access Controls: Role-based access with separate admin and user permissions
• Infrastructure: Hosted on secure cloud infrastructure with regular security audits

3.2 Data Backup and Recovery

We maintain regular automated backups of your data to prevent loss due to technical failures. Backups are encrypted and stored securely in geographically distributed locations.

3.3 Internal Policies

Access to user data is restricted to authorized personnel who require it for operational purposes. All employees and contractors are bound by confidentiality agreements and trained on data protection practices.

4.1 Third-Party Service Providers

We share information with trusted service providers who assist in operating our platform:

• Supabase: Database hosting, authentication, and real-time infrastructure
• Stripe: Payment processing and subscription management
• AI Providers: Third-party AI models for content generation (OpenAI, Anthropic, or similar)
• Cloud Infrastructure: Hosting and content delivery network services
• Analytics Services: Usage analytics and performance monitoring tools

These providers are contractually obligated to use your data only for specified purposes and maintain appropriate security measures.

4.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our platform before your data is transferred.

4.3 Legal Requirements

We may disclose your information when required by law, court order, or government request, or to protect the rights, property, or safety of AMRO Pilot, our users, or others.

4.4 No Sale of Personal Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy:

• Account Data: Retained while your account is active and for up to 90 days after deletion
• Generated Content: Stored indefinitely unless you delete it or close your account
• Transaction Records: Retained for 7 years for tax and accounting purposes
• Usage Logs: Retained for up to 12 months for security and analytics
• Backup Data: Retained for up to 30 days in automated backup systems

You can request deletion of your account and associated data at any time by contacting us at info@amroagentic.com.

Depending on your location, you may have the following rights:

6.1 General Rights

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal data (subject to legal obligations)
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing of your data for certain purposes
• Restriction: Request limitation on how we use your data

6.2 GDPR Rights (EU/UK Users)

If you are located in the European Union or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local supervisory authority.

6.3 CCPA Rights (California Users)

California residents have rights under the California Consumer Privacy Act (CCPA), including the right to opt-out of data sales (note: we do not sell personal information) and non-discrimination for exercising privacy rights.

6.4 Exercising Your Rights

To exercise any of these rights, please contact us at info@amroagentic.com. We will respond to your request within 30 days.