Privacy Policy

At Refraim AI, we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your personal information.

1. Information We Collect

Account Information

When you create an account, we collect your email address, name, and authentication credentials (when using OAuth providers like Google, Microsoft, or Apple).

Usage Data

We collect information about how you use the Service, including:

• Tasks and calendar events you create
• AI conversations and queries
• Email content processed through our AI features
• Usage statistics and feature interactions

Third-Party Integrations

When you connect third-party services (Gmail, Google Calendar, etc.), we access only the data necessary to provide our services. We store OAuth tokens securely and refresh them as needed.

2. How We Use Your Information

We use your information to:

• Provide and improve the Service
• Process AI requests and generate responses
• Synchronise your calendar and email
• Send you service-related notifications
• Analyse usage patterns to improve features
• Process payments and manage subscriptions
• Provide customer support

3. AI and Data Processing

We use OpenAI's API to power our AI features. When you use AI-assisted features:

• Your queries are sent to OpenAI for processing
• OpenAI does not use your data to train their models
• All API calls are encrypted in transit
• We do not store AI-generated content longer than necessary

4. Data Security

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit using HTTPS/TLS
• Database credentials are encrypted at rest using AES-256
• OAuth tokens are stored securely and refreshed automatically
• Regular security audits and updates
• Access controls and authentication requirements

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data only in these circumstances:

• Service Providers: With third-party services (OpenAI, Stripe, Google) necessary to provide our features
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Your Rights and Choices

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and data
• Export your data
• Opt out of marketing communications
• Disconnect third-party integrations

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. When you delete your account, we delete your personal data within 30 days, except where required by law to retain it longer.

8. Cookies and Tracking

We use essential cookies for authentication and session management. We use analytics to understand how users interact with the Service to improve features.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

10. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through the Service. Your continued use after such changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or your data, please contact us through the support channels in the Service or via the settings page.