Effective Date: May 12th, 2025.
1. Introduction
Understand Tech Inc. ("Understand.tech", "we", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services (the "Site" or "Platform"), and how we handle data retrieved through third-party integrations.
2. Who Is Responsible for Processing Your Personal Data?
Understand Tech Inc. is the data controller for all data processed on this platform.
3. What Personal Data Do We Collect?
We collect and process the following types of data:
- Account Data: Email address, profile picture (optional), account preferences
- Authentication & Authorization Data: OAuth tokens for third-party services you connect
- User Files & Documents: Data you choose to upload or link, including from: Google Drive, OneDrive / SharePoint, GitHub, Azure DevOps, Jira, Confluence, AWS S3, Notion, Public or private websites (if you use the web crawler)
- AI Interaction Data: Prompts, responses, feedback (optionally encrypted)
- Usage Data: IP address, browser type, page interactions, session logs
4. Data Source Integrations
We support integrations with several third-party services. Data is only accessed after explicit user authorization.
Services with Persistent Access:
We maintain access to your data until you revoke it or disconnect your account:
- Google Drive
- OneDrive / SharePoint
Services with Limited/On-Demand Access:
We access data only during active use (create or update of AI Assistant) : GitHub, Azure DevOps, Jira, Confluence, AWS S3, Notion
You can revoke access at any time via the third-party platform (e.g., Google Account settings, Microsoft consent dashboard).
5. Use of Google Workspace APIs
Our application uses the following Google Drive API scopes:
- https://www.googleapis.com/auth/drive.readonly
- https://www.googleapis.com/auth/drive.metadata.readonly
These scopes allow us to read and analyze files on your Google Drive for the sole purpose of creating AI assistants based on content you’ve authorized us to process.
We comply fully with the Google API Services User Data Policy, including the Limited Use requirements:
- We do not use your data to train or improve any AI or ML models.
- We do not share or sell your Google Drive data.
- We only process content to generate AI responses for your own use, and you may revoke access at any time.
- Access to your Google Drive is granted only after your explicit consent and remains active only while connected.
- All content access is governed by strict internal security and access control mechanisms.
Disclosure :
The use of the information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
6. Website Crawling and User Responsibility
We offer functionality that lets you crawl websites and create AI assistants based on publicly available web content. You are solely responsible for:
- Ensuring that you have the right to crawl the website
- Respecting the site’s robots.txt, terms of use, and intellectual property rights
Understand.tech assumes no responsibility or liability for unauthorized web crawling.
7. Use of AI/ML APIs (e.g., OpenAI)
We use OpenAI and similar services in a mode that disables data logging and training. This ensures:
- Your data is never used to train AI models
- No prompt or content is stored beyond the scope of your session or team
- Optional encryption (ephemeral or public-key) is used for chat logs and feedback
We fully comply with enterprise-grade data confidentiality standards.
8. Why We Process Your Data
We process your data to:
- Authenticate and manage your account
- Enable you to create AI assistants based on your documents or selected sources
- Respond to support inquiries
- Provide you with updates and notifications
- Analyze usage to improve the platform (aggregate and anonymized)
9. Cookies
We use cookies for authentication, session handling, analytics, and improving your experience. You can disable cookies via browser settings, but this may limit functionality.
10. Automated Processing and Profiling
We do not conduct any automated profiling beyond what is required to generate assistant responses based on your selected data. No user is subject to decision-making without their involvement.
11. Data Sharing
We do not sell or trade your personal data. Your data is only shared with:
- Infrastructure providers (cloud, storage, AI model APIs)
- CRM or support tools (e.g., email support, user feedback systems)
- AI APIs (e.g., OpenAI) in non-training, no-retention modes
12. Data Security
We implement strong security practices including:
- TLS 1.2+ for all data in transit
- AES-256 encryption at rest
- Ephemeral key-based encryption for private data such as chats or feedback
- Role-based access control
- We are actively pursuing SOC 2 Type II certification
13. Data Retention
Your data is kept as long as needed to deliver services or comply with legal obligations. You can request deletion at any time.
14. Your Rights
You have the right to:
- Access your data
- Correct inaccuracies
- Delete your data
- Request data portability
- Restrict or object to processing
- Withdraw consent at any time
Contact us at: support@understand.tech
15. Children's Privacy
Our platform is not intended for users under the age of 16.
16. CRM and Workflow Automation Integrations
Our platform offers optional integrations with CRM systems (such as HubSpot and Zoho) and workflow automation tools (such as n8n).
If you choose to enable these integrations and provide valid API keys, our platform may:
- Collect and write information about your end users (such as name, email, or phone number) to your CRM system
- Register and log assistant conversations in your CRM or automation workflow
These features are provided on your behalf and under your direction. You, as the account owner and host of the assistant or chatbot, are solely responsible for:
- Informing your end users of this data collection
- Complying with applicable privacy laws
- Managing and securing your CRM and workflow platform access
We do not retain or use your end users’ data for any other purpose beyond what you authorize through these integrations.
17. Changes to This Policy
We may update this policy from time to time. The date at the top reflects the latest version.
18. Contact
Understand Tech Inc.
✉️ support@understand.tech
🌐 www.understand.tech