Privacy Policy

We collect information in the following categories:

• Account and waitlist information. Email address, name, profile image, authentication details, workspace membership, invitations, and preferences.
• Content and files. Pages, blocks, comments, databases, uploaded files, imported documents, images, PDFs, metadata, and other content you create or bring into Ponzu.
• AI inputs and outputs. Prompts, instructions, selected page context, generated drafts, proposed edits, agent activity, and other data needed to provide AI features you invoke.
• Collaboration activity. Workspace roles, sharing settings, page activity, comments, timestamps, and actions needed to show collaboration history.
• Usage, device, and log data. IP address, browser and device data, operating system, referring pages, feature usage, diagnostics, crash reports, and security logs.
• Billing information. Plan, invoice, subscription, payment status, and limited payment metadata. Our payment provider processes full card details.
• Communications. Messages you send us, support requests, feedback, survey responses, and consent records.

• Provide, maintain, secure, and improve the Service.
• Create and manage accounts, workspaces, permissions, and waitlist access.
• Process prompts, page context, and outputs for AI features you choose to use.
• Store, sync, render, search, and share your content according to your settings.
• Process billing, subscriptions, credits, and usage limits.
• Send product, account, security, transactional, and support communications.
• Detect, prevent, and respond to spam, abuse, fraud, security incidents, and outages.
• Analyze product usage and reliability so we can improve Ponzu.
• Comply with legal obligations and enforce our terms.

When you use AI features, we process the prompt, selected context, and relevant workspace data needed to produce a response. Depending on product configuration, that processing may use self-hosted models, third-party AI providers, or both. We aim to send only the data needed for the feature you invoke.

We do not sell your private content. We do not use your private workspace content to train third-party foundation models where a provider offers a no-training or enterprise data-protection setting. AI outputs may be wrong, so you should review them before relying on them.

We disclose information in these limited situations:

• Service providers. Vendors that help us run Ponzu, including cloud hosting, database, storage, email, authentication, billing, analytics, error monitoring, security, support, and AI infrastructure providers.
• Collaborators and workspace members. People you invite, share with, or authorize can see content and activity according to your workspace settings.
• Integrations you enable. If you connect third-party services, we share the data needed to provide that integration.
• Legal, safety, and compliance. We may disclose information if required by law or if we believe disclosure is needed to protect users, rights, property, security, or the integrity of the Service.
• Business transfers. Information may be transferred in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to this Policy.

We use necessary cookies and similar technologies to keep you signed in, remember session state, prevent abuse, and secure the Service. We may also use privacy-conscious product analytics and error monitoring to understand reliability and feature usage. We do not use third-party advertising cookies.

We retain account information, workspace content, and logs for as long as needed to provide the Service, comply with law, resolve disputes, enforce agreements, prevent abuse, and maintain backups. If you delete content or close your account, we delete or de-identify associated data within a reasonable period, subject to legal, security, backup, and shared-workspace retention needs.

You can access, edit, export, and delete much of your content in the Service. You can unsubscribe from marketing emails using the link in those emails; we may still send transactional or security messages. Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, objection, or appeal.

To make a privacy request, email support@conceptify.info. We may need to verify your identity before responding.

We use technical and organizational safeguards designed to protect information, including encryption in transit, access controls, monitoring, backups, and tenant isolation. No online service can guarantee perfect security, but we work to reduce risk and respond promptly to incidents.

Ponzu is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

We may process and store information in the United States and other countries where we or our providers operate. Those countries may have data-protection laws different from where you live. Where required, we use appropriate safeguards for cross-border transfers.

We may update this Policy from time to time. We will update the "Last updated" date above and, for material changes, provide additional notice where appropriate. Your continued use of the Service after an update means the revised Policy applies.

Questions about this Policy or your data? Email support@conceptify.info.