Back

Privacy Policy

Last updated: February 27, 2026

1. Introduction

Acris AI ("Acris," "we," "us," or "our") operates the Acris AI platform, including our website, web application, mobile application, API, and embeddable chat widgets (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, and profile image when you register or sign in via Google OAuth or mobile authentication.
  • Organization Information: Company or organization name and billing details when you create or join a workspace.
  • Content You Create: AI agents, workflow configurations, chat messages, tasks, notes, knowledge base documents, and files you upload to the Service.
  • Payment Information: Billing and subscription details processed through our payment provider, Stripe. We do not directly store your credit card numbers.
  • Communications: Any messages or feedback you send to us directly.

2.2 Information Collected Automatically

  • Usage Data: Pages visited, features used, interactions with AI agents, session duration, and other analytics data.
  • Device Information: Browser type, operating system, device type, and screen resolution.
  • Log Data: IP address, access timestamps, referring URLs, and actions performed (recorded in audit logs for security purposes).
  • Cookies and Similar Technologies: Session cookies for authentication and analytics cookies to understand how the Service is used.

2.3 Information from Third Parties

  • Authentication Providers: We receive your name, email, and profile image from Google when you sign in with Google OAuth.
  • Connected Integrations: If you connect third-party services (e.g., Google Drive, Gmail, or other integrations via Pipedream), we may receive data from those services as authorized by you.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Provide and Operate the Service: To create and manage your account, run AI agents, process chat interactions, manage tasks and projects, and deliver the core functionality of Acris AI.
  • Process AI Requests: Your chat messages and uploaded content are sent to third-party AI providers (such as OpenAI and Anthropic) to generate AI responses. Knowledge base documents are processed into vector embeddings for retrieval-augmented generation.
  • Billing and Payments: To process subscriptions, manage credits, and handle payment transactions through Stripe.
  • Communication: To send transactional emails (e.g., welcome emails, account notifications) and respond to your inquiries.
  • Security and Compliance: To maintain audit logs, detect fraud, prevent abuse, and ensure the security of the Service.
  • Analytics and Improvement: To understand usage patterns, diagnose technical issues, and improve the Service.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

  • AI Service Providers: Chat messages and content are transmitted to third-party AI model providers (OpenAI, Anthropic, Perplexity) to generate responses. These providers process data under their own privacy policies and data processing agreements.
  • Infrastructure Providers: We use third-party services for hosting, database storage, vector search (Pinecone), file storage, background job processing (Trigger.dev), workflow automation (Pipedream), and analytics (PostHog).
  • Payment Processor: Stripe processes your payment information for subscription billing.
  • Email Service: Resend delivers transactional emails on our behalf.
  • Within Your Organization: Other members of your workspace may access shared agents, projects, tasks, and associated data.
  • Legal Obligations: We may disclose information if required by law, regulation, legal process, or governmental request.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Chat messages, task logs, and agent data are retained while your account exists. You may delete specific agents, chat sessions, or content at any time. When you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, except where retention is required by law.

6. Data Security

We implement industry-standard security measures to protect your information, including encrypted data transmission (TLS/SSL), secure authentication mechanisms, and access controls. However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete information.
  • Deletion: Request deletion of your personal information, subject to legal retention obligations.
  • Data Portability: Request your data in a structured, machine-readable format.
  • Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
  • Opt-Out of Analytics: You may disable analytics cookies through your browser settings.

To exercise any of these rights, please contact us at hello@acris.ai.

8. Embedded Chat Widgets

Acris AI allows users to embed AI chat widgets on third-party websites. When end users interact with an embedded widget, their chat messages and basic session data are collected and processed in accordance with this Privacy Policy. The website operator embedding the widget is responsible for disclosing the use of Acris AI to their visitors.

9. Children's Privacy

The Service is not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at hello@acris.ai and we will take steps to delete it.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States, where our servers and third-party service providers are located. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service with a revised "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Acris AI
Email: hello@acris.ai