Privacy Policy

1. Introduction

Thig.ai ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Service.

2. Information We Collect

Information You Provide

• Account Information: Name, email address, password, profile photo
• Payment Information: Billing address, payment method details (processed securely by Stripe)
• Content: PRDs, conversations, and documents you create
• Communications: Messages you send to our support team

Information Collected Automatically

• Usage Data: Features used, pages visited, actions taken
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, referring URLs
• Cookies: Session and preference data (see Cookie Policy)

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our Service
• Process transactions and send related information
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues and fraud
• Comply with legal obligations

4. AI and Your Data

Our AI features process your input to generate PRDs. Important notes:

• Your conversations are used to generate responses within your session
• We do not use your PRD content to train our AI models without explicit consent
• You can delete your data at any time through account settings
• Enterprise customers have additional data isolation options

5. Data Sharing

We may share your information with:

• Service Providers: Third parties who help us operate our Service (hosting, payments, analytics)
• Team Members: Other users in your organization, based on your sharing settings
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

6. Data Security

We implement appropriate security measures to protect your data:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Regular security audits and penetration testing
• Access controls and authentication requirements
• Secure data centers with physical security measures

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. After account deletion:

• Personal data is deleted within 30 days
• Anonymized analytics data may be retained
• Backups are purged within 90 days
• Legal retention requirements may extend these periods

8. Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate or incomplete data
• Deletion: Request deletion of your data
• Portability: Export your data in a machine-readable format
• Objection: Object to certain processing of your data
• Restriction: Request limited processing of your data

To exercise these rights, contact us at privacy@prd.ai or use the settings in your account.

9. International Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses for transfers outside the EEA.

10. Children's Privacy

Our Service is not intended for users under 16 years of age. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use after changes constitutes acceptance.

12. Contact Us

For questions about this Privacy Policy or our data practices:

Email: privacy@prd.ai
Data Protection Officer: dpo@prd.ai
Address: [Your Business Address]