Privacy Policy - Affiliate-it Platform

🔒 Your Privacy Matters

AI-IT INC ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Affiliate-it Platform and related services ("the Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.

Important:We use Facebook's official OAuth system for social media integration, which means you log in directly with Facebook - we never see or store your Facebook password.

📋 Information We Collect

Information You Provide

• Account Information: Business name, email address, contact information, and account credentials
• Business Data: Business profiles, menu information, pricing, and business settings
• Customer Data: Customer information, leads, membership signups, and contact details you upload
• Content: Content, images, and materials you create or upload to the platform
• AI Knowledge & Chat Data: Knowledge documents you add for AI widgets (FAQs, policies, product info), widget conversation transcripts, visitor chat logs, and lead information captured through AI features
• Payment Information: Billing details and payment method information (processed securely through third-party payment processors)
• Support Communications: Information you provide when contacting our support team

Information Automatically Collected

• Usage Data: How you interact with the Service, features used, and analytics events
• Device Information: IP address, browser type, device type, and operating system
• Cookies and Tracking: We use cookies and similar technologies to enhance your experience and analyze usage patterns

Information from Third-Party Integrations

• Facebook Data: When you connect Facebook, we receive access tokens and page information (as described below)
• Marketplace Partner Data: Information necessary for marketplace integrations (order data, inventory, etc.)

🔄 How We Use Your Information

AI-IT INC uses the information we collect for the following purposes:

• Service Provision: To provide, maintain, and improve the Affiliate-it Platform and its features
• Account Management: To create and manage your account, process subscriptions, and handle billing
• Business Operations: To facilitate business profile management, content generation, and analytics
• AI Features: To power AI widgets, knowledge search (RAG), content generation, and related automation using third-party AI model providers
• Customer Support: To respond to your inquiries, provide support, and resolve issues
• Marketplace Integrations: To enable integrations with marketplace partners and facilitate transactions
• Communication: To send service-related notifications, updates, and important information
• Analytics: To analyze usage patterns, improve services, and develop new features
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Security: To protect against fraud, abuse, and security threats

🤖 AI Features, Business Data & Model Providers

The Affiliate-it Platform includes AI-powered features such as AI widgets, knowledge-base search (RAG), Web-IT and React-to-IT generation, and visitor chat. This section explains how your business data is handled in connection with those features.

What We Store on the Platform

Your business content remains stored in our secure database, scoped to your business account. This includes:

• Knowledge documents you create or edit (including per-widget knowledge in AI Widget settings)
• Search indexes derived from that content (text chunks and embedding vectors stored in our database)
• Widget conversations, visitor chat logs, and lead information captured through AI widgets
• AI configuration such as provider choice, model preferences, and API key references (keys are stored encrypted and are not displayed in full after saving)

How AI Uses Your Data (Inference — Not Training)

We do not use your business knowledge, documents, or chat transcripts to train or fine-tune proprietary AI models. AI features use a retrieval-augmented generation (RAG) pattern:

1. Your knowledge is stored and indexed in our database.
2. When a visitor asks a question, the system searches your stored knowledge for relevant passages.
3. Only a small number of matching excerpts are included in a one-time request to an AI provider to generate a reply.
4. The AI provider returns an answer; we do not update model weights with your content.

In plain terms:Your data stays your canonical copy on the platform. The AI reads relevant snippets at request time to answer questions — it does not "learn" or permanently memorize your business information into a shared model.

Third-Party AI Providers

To generate responses and embeddings, we send portions of text to third-party AI infrastructure providers (such as Together AI, OpenAI, or Vercel AI Gateway, depending on your configuration). This may include:

• Visitor messages and recent conversation context
• Relevant knowledge excerpts retrieved from your indexed documents
• Business context needed to answer (e.g., business name, scheduling availability you configured)

Provider policies apply: How those providers handle, retain, or use API inputs is governed by their own terms and privacy policies and by the API key tier you use. If you connect your own API key in Dashboard → Settings → AI Settings, your relationship with that provider may apply directly to those requests.

When you use the platform-provided AI key ("Platform" provider), requests are processed under our provider agreements. We select providers that offer API terms appropriate for business use; you should review current provider documentation for your compliance needs.

Your Choices & Controls

• Per-widget knowledge: Scope FAQs and policies to individual AI widgets or share business-wide documents where appropriate
• Edit and delete: Update or remove knowledge documents from the AI Widget Knowledge tab; deletions remove associated search chunks from our database
• Provider & API key: Choose Platform, Together, OpenAI, or Vercel AI Gateway and optionally supply your own key in Settings → AI Settings
• Conversation data: Widget conversations are stored for inbox and continuity; contact us or use account tools where available to request deletion subject to legal retention requirements

Your Responsibilities for AI Content

• Do not upload secrets (passwords, API keys), unnecessary sensitive personal data, or regulated health/financial information into knowledge documents unless you have a lawful basis and appropriate safeguards
• Ensure you have rights to the content you index for AI search
• Inform your customers where required if you use AI chat on your public sites
• Review third-party AI provider terms when using your own API keys

What We Do NOT Do With Your AI Data

• ❌ Sell your knowledge documents or chat logs to data brokers
• ❌ Use your business content to train our own foundation models
• ❌ Share your indexed knowledge with other businesses on the platform (tenant data is isolated by business account)

🤝 Information Sharing with Marketplace Partners

AI-IT INC partners with various online marketplaces, e-commerce platforms, food delivery services, and third-party providers to enhance the Service. When you use marketplace integrations, we may share certain information with these partners as necessary to provide the integrated services.

What We Share with Marketplace Partners:

• Business Information: Business name, menu items, pricing, and product descriptions necessary for listing on marketplaces
• Order Information: Order details, customer contact information (with your consent), and transaction data
• Inventory Data: Product availability, stock levels, and inventory updates
• Account Information: Business account identifiers and authentication credentials necessary for API integration
• Analytics Data: Aggregated usage statistics and performance metrics

Marketplace Partner Categories:

• Food Delivery Platforms: Grubhub, DoorDash, Uber Eats, Postmates, and similar services
• E-commerce Marketplaces: Amazon, eBay, Etsy, and other online retail platforms
• Payment Processors: Stripe, PayPal, and other payment processing services
• Point-of-Sale Systems: POS integration partners for inventory and order synchronization
• Marketing Platforms: Advertising and marketing service providers
• Analytics Providers: Business intelligence and data analytics services

Marketplace Partner Responsibilities:

• Marketplace partners are independent entities with their own privacy policies
• Each marketplace partner is responsible for how they collect, use, and protect your data
• We recommend reviewing each marketplace partner's privacy policy before enabling integrations
• You can disable marketplace integrations at any time through your account settings
• Data shared with marketplace partners is subject to their terms and privacy practices

Your Choice: Marketplace integrations are optional. You control which integrations you enable and can disable them at any time. When you disable an integration, we will stop sharing new data with that partner, though previously shared data may remain on their platform according to their policies.

📱 Facebook Integration Privacy

Facebook Login & Posting

• When you connect Facebook, you are redirected to Facebook's secure login page
• You log in directly on Facebook.com - we never see your password
• Facebook provides us with an access token (like a temporary key) that allows posting
• You control what permissions you grant (we only request: pages_manage_posts, pages_read_engagement, pages_show_list)
• You can revoke access at any time from your Facebook settings

What We Store Related to Facebook:

• Access Tokens: Stored securely in httpOnly cookies for session management
• User ID: Facebook user identifier for account association
• Page Information: Facebook page IDs and names if you connect business pages
• Post Records: Basic information about posts made through our dashboard (post IDs, status, timestamps)

What We DON'T Store:

• ❌ Your Facebook password
• ❌ Your Facebook username or email
• ❌ Your Facebook friends list or private profile information
• ❌ Your personal messages or private content
• ❌ Any Facebook data beyond what's necessary for posting functionality

🔒 Data Security

AI-IT INC implements industry-standard security measures to protect your information:

• Encryption: Data transmitted between your device and our servers is encrypted using SSL/TLS
• Secure Storage: Sensitive data is stored in encrypted databases with restricted access
• Access Controls: Only authorized personnel have access to your data, and only as necessary to provide the Service
• Token Security: Facebook access tokens are stored in secure, httpOnly cookies that expire automatically
• Regular Updates: We regularly update our security practices and systems to address emerging threats
• Third-Party Security: Marketplace partners and payment processors use their own security measures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

📊 Data Retention

AI-IT INC retains your information for as long as necessary to:

• Provide the Service to you
• Comply with legal obligations
• Resolve disputes and enforce our agreements
• Maintain business records as required by law

When you delete your account or request data deletion, we will delete or anonymize your personal information, except where we are required to retain it by law or for legitimate business purposes.

Marketplace Partner Data: Data shared with marketplace partners may be retained according to their respective privacy policies and retention schedules, even after you disable integrations or delete your account with us.

AI & Knowledge Data: Knowledge documents, embeddings, and widget conversation history are retained while your account is active and the feature remains in use. You may delete individual knowledge documents from the dashboard. When you delete your account, we will delete or anonymize associated data except where retention is required by law.

🌍 International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using the Service, you consent to the transfer of your information to these countries.

Marketplace partners may be located in different jurisdictions, and data shared with them will be subject to the laws of those jurisdictions.

👤 Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal and business requirements)
• Data Portability: Request a copy of your data in a portable format
• Opt-Out: Opt-out of certain data processing activities, including marketing communications
• Restrict Processing: Request restriction of how we process your information
• Object: Object to certain types of processing

To exercise these rights, please contact us through the dashboard or our official support channels. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

Note: For information held by marketplace partners, you must contact those partners directly to exercise your privacy rights.

🔌 Managing Third-Party Integrations

Facebook Integration

You can revoke Facebook access at any time:

1. Go to Facebook.com → Settings → Apps and Websites
2. Find our app in the list
3. Click "Remove" to revoke access
4. All posting capabilities will stop immediately

Marketplace Integrations

You can manage marketplace integrations:

• Disable integrations through your account settings
• Manage permissions for each marketplace partner individually
• Contact marketplace partners directly to delete your data from their platforms
• Review marketplace partner privacy policies and terms

🍪 Cookies and Tracking Technologies

AI-IT INC uses cookies and similar tracking technologies to:

• Maintain your session and authentication state
• Store your preferences and account settings
• Analyze usage patterns and improve the Service
• Provide personalized experiences
• Enable third-party integrations (Facebook, marketplace partners)
• Facilitate payment processing and subscription management

Types of Cookies We Use:

• Essential Cookies: Required for the Service to function (authentication, session management)
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how you use the Service
• Third-Party Cookies: Used by marketplace partners, payment processors, and other integrated services

You can control cookies through your browser settings. However, disabling certain cookies may limit or prevent functionality of the Service.

Marketplace Partner Cookies:Marketplace partners and third-party services may use their own cookies and tracking technologies, subject to their own privacy policies. We recommend reviewing each partner's cookie policy.

👶 Children's Privacy

The Affiliate-it Platform is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

📝 Changes to This Privacy Policy

AI-IT INC may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated Privacy Policy on this page
• Updating the "Last Updated" date
• Sending email notifications for significant changes (when applicable)
• Displaying notifications within the Service

Continued use of the Service after changes to this Privacy Policy constitutes acceptance of the updated policy.

⚖️ Legal Disclaimers and Responsibilities

AI-IT INC Responsibilities:

• Protecting your data according to this Privacy Policy
• Providing secure data transmission and storage
• Notifying you of data breaches as required by law
• Responding to your privacy requests

AI-IT INC is NOT Responsible For:

• Content posted to Facebook, social media, or marketplace platforms using our tools
• Privacy practices of marketplace partners or third-party services
• Data breaches or security incidents at marketplace partner platforms
• Violations of third-party Terms of Service (Facebook, marketplace partners, etc.)
• How marketplace partners use or store your data according to their own policies
• Any misuse of the Service by users

User Responsibilities:

• Managing your account security and access credentials
• Reviewing and understanding marketplace partner privacy policies before enabling integrations
• Complying with all applicable privacy laws and regulations
• Obtaining necessary consents for sharing customer data with marketplace partners
• Content you post through the Service
• Managing third-party account permissions (Facebook, marketplace partners)
• Ensuring AI knowledge and chat features comply with applicable laws and your customer disclosures
• Not placing unnecessary sensitive or regulated data into AI knowledge bases

Third-Party Responsibilities:

• Facebook: Secure authentication, account management, and enforcement of their privacy policies
• Marketplace Partners: Their own data collection, use, security, and privacy practices according to their policies
• Payment Processors: Secure payment processing and PCI compliance
• AI Model Providers: Processing, retention, and security of API requests according to their terms (Together AI, OpenAI, Vercel AI Gateway, ElevenLabs, and others you configure)

📞 Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Company: AI-IT INC
• Service: Affiliate-it Platform
• Contact: Through the dashboard support channels or official contact methods

For privacy concerns related to marketplace partners, please contact those partners directly using the contact information provided in their privacy policies.

🔗 Additional Privacy Resources

• Terms of Service: View our Terms of Service
• Facebook Privacy Policy: https://www.facebook.com/privacy/policy/
• Together AI Privacy: https://www.together.ai/privacy
• OpenAI Policies: https://openai.com/policies
• Marketplace Partner Policies: Please review each marketplace partner's privacy policy individually