Privacy Policy

PabloAI ("we", "our", or "us") provides an AI-powered strategy, financial modeling, and executive memo creation platform available at https://pabloai.co. This Privacy Policy explains how we collect, use, store, share, and protect your information when you visit our website, register an account, authenticate using third-party providers (such as Google), and use our services.

We collect only the information necessary to provide and operate PabloAI:

• Account Information: When you register, we collect your name, email address, password hash (if using email credentials), and optional business/company name.
• Third-Party Authentication Data: When you sign in using Google or GitHub, we receive basic profile details permitted by you (specifically your Google/GitHub account identifier, name, verified email address, and profile picture URL).
• User Inputs & Generated Content: Strategic briefs, document drafts, financial models, slides, and notes that you enter or generate within the platform.
• Business Context: Company profiles, industry frameworks, and target operational parameters you provide to tailor AI outputs.
• Usage & Telemetry Data: Generation counts, feature interactions, timestamps, browser type, device information, and IP addresses to maintain security and monitor service availability.

We do not store complete credit card or banking details. All payment processing is securely managed by Stripe.

PabloAI provides Google Sign-In for seamless and secure account authentication. If you choose to log in with Google:

• Data Accessed: We request only non-sensitive identity scopes: openid, email, and profile. We do not request access to Google Drive, Gmail, Contacts, or any sensitive/restricted Google APIs.
• Purpose of Use: Your Google account information is strictly used to create your profile, authenticate your identity upon return, display your avatar/name in the workspace navigation, and send necessary account notifications.
• Google Limited Use Statement: PabloAI's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• No AI Model Training: Information received via Google APIs is never used to train, develop, or improve generalized or foundation artificial intelligence and machine learning models.
• No Sale or Transfer: We do not sell Google user data to data brokers, advertising networks, or unauthorized third parties.

We use collected data strictly for legitimate operational purposes:

• To provide, personalize, and maintain the PabloAI workspace;
• To execute AI generation workflows tailored to your specific prompts and company parameters;
• To process subscription billing and invoices via Stripe;
• To send critical system updates, security alerts, and billing receipts;
• To detect and prevent fraudulent use, abuse, or unauthorized access;
• To debug errors and optimize system performance.

We will never sell or rent your personal information to third parties.

Your account records and workspace documents are stored in secure, serverless PostgreSQL instances hosted via Neon in London, United Kingdom (AWS eu-west-2).

All traffic between your browser and our servers is encrypted in transit using industry-standard TLS (HTTPS). Data stored at rest is encrypted using AES-256 standards. We conduct routine audits and maintain strict role-based access controls to safeguard server infrastructure.

To run PabloAI reliably, we engage trusted infrastructure partners under strict data protection terms:

• Anthropic (Claude API): Processes prompt inputs to generate analytical memos and frameworks. Under Anthropic's commercial API terms, customer inputs are not used to train AI models.
• Stripe: Processes payment card transactions, manages recurring subscriptions, and maintains PCI-DSS compliant billing records.
• Stack Auth / Neon Auth: Manages authentication infrastructure, session token issuance, and password hashing.
• Vercel: Provides secure hosting, edge caching, and serverless compute infrastructure.
• Resend: Delivers transactional emails, billing confirmations, and password reset links.

We use essential HTTP cookies and local storage tokens solely to maintain authenticated sessions and preserve user interface theme preferences. We do not use third-party advertising cookies or cross-site behavioral tracking cookies.

We retain your personal data and documents only for as long as your account remains active. You maintain full ownership and control over your data:

• Account Deletion: You can delete your account and all associated documents directly inside the application settings, or by submitting a deletion request to hello@pabloai.co with the subject line "Account Deletion Request".
• Data Erasure: When an account is deleted, all personal data, Google profile links, authentication tokens, and generated documents are permanently expunged from our live database within 30 days.
• Data Export: You can export generated documents, spreadsheets, and presentations directly from your workspace at any time.

Depending on your location, you may have legal rights under the UK GDPR, EU GDPR, or California Consumer Privacy Act, including the right to access your personal data, request correction of inaccurate data, request restriction of processing, object to processing, or request data portability. To exercise any of these rights, contact our Data Protection team at hello@pabloai.co.

PabloAI is designed exclusively for business operators, founders, and professionals over the age of 18. We do not knowingly solicit or collect data from anyone under 18 years of age. If we learn that a minor has submitted personal information, we will delete that data immediately.

We may update this policy periodically to reflect platform enhancements or regulatory updates. We will notify users of any material changes via email or an in-app notice prior to the change taking effect. The "Last updated" date at the top of this page indicates the date of latest revision.

If you have any questions, feedback, or data requests regarding this Privacy Policy or our security practices, please contact us:

PabloAI / Emmanuel Agyei
Email: hello@pabloai.co
Direct: emanagyei@gmail.com
Website: https://pabloai.co