Privacy policy

Who we are

Aidfolk is a product of Bracket Mind, based in Pakistan (“we”, “us”). This policy covers this website (aidfolk.com), the Aidfolk app (app.aidfolk.com) and the chat widget our customers put on their websites.

For your account, billing and our website, we decide how personal data is used (we're the controller). For the content our customers add and the conversations their website visitors have with their agents, we process data on our customers' behalf (we're a processor): each customer decides what their agent is for and is responsible for telling their visitors.

What we collect

When you create and use an account

• Account details: your name, email address, workspace name and role, and your password, which we store only as a secure hash. If you sign in with Google, the ID of your Google account.
• Content you add: the websites we read for you, files, notes and API sources, your agents' settings, and the conversations in your workspace.
• Usage and billing: records of AI usage (the model, the amount of text processed and the credits used, but not the text itself), your plan, and payment records. Lemon Squeezy tells us the billing email, amount and plan of a payment; we never receive card details.
• Security data: when you sign in, your IP address, browser and device, and an approximate location (country, region and city) worked out from the IP address on our own server. You can see this list under “Where you're signed in” in the app.

When someone chats with an agent on a customer's website

• The messages the visitor sends and the answers they receive
• The website the chat happened on, the visitor's IP address, browser and an approximate location worked out from the IP address

We don't ask website visitors for their name or email address. If they type personal information into the chat, it's stored as part of the conversation.

When you visit this website

This website sets no cookies and runs no advertising or tracking scripts. We may count visits with Cloudflare Web Analytics, which doesn't use cookies or build a profile of you.

How we use it

• To provide Aidfolk: reading and indexing your content, answering your customers' questions, showing you your conversations and usage. (Legal basis: performing our contract with you.)
• To keep it secure: verifying email addresses, checking for bots, limiting sign-in attempts, showing you where you're signed in, and investigating abuse. (Our legitimate interest in a safe service.)
• To bill you: through Lemon Squeezy, our merchant of record. (Contract, and our legal obligations.)
• To talk to you: account emails such as verification, invitations, low-credit alerts and billing notices, and replies to your support requests. We don't send marketing email without your consent.
• To improve Aidfolk: using aggregated usage figures, such as how many answers were given.

We don't sell personal data, we don't use it for advertising, and we don't use your content or your customers' conversations to train AI models.

AI processing

To answer a question, we send the AI model the question, the passages from the workspace's content that match it, the agent's instructions and the last few turns of the conversation. To index content, we send its text to an embeddings model. The AI provider processes this to return the result. Which provider receives it depends on the model: see the list below. If you use your own AI provider key, your requests go to your own account with that provider, under your agreement with them.

Answers are generated by AI from the workspace's content. They can be incomplete or wrong, which is why each answer can show its sources.

Our staff don't read conversations as a matter of course. Our admin tools hide conversation text by default; reading one takes a deliberate action, for example to resolve a support request or investigate abuse, and every read is recorded with who and when.

Who we share it with

These companies process personal data for us, only to provide their part of Aidfolk:

We'll update this list before we add a company that processes personal data for us. We may also disclose data if the law requires it, to protect people from harm, or as part of a sale or merger of our business, in which case this policy continues to apply.

How long we keep it

• IP addresses stored with sign-ins and website chats are erased after 90 days. The approximate location worked out from them is kept. Our servers' technical logs record only the network part of an address (such as 203.0.113.0), never the full address.
• Your account and content are kept while your account is open. Conversations stay in your workspace until you delete them.
• What you delete (conversations, knowledge, team members you remove) disappears from the app at once and is erased for good from our database 30 days later.
• Payment records are kept as long as tax and accounting law requires.
• Backups of the database are made every night and replaced on a rolling basis.

To have your account and its data erased completely, write to us (below). We'll erase it within 30 days, except what we must keep by law.

Your rights

Depending on where you live, you can ask to see the personal data we hold about you, correct it, erase it, get a copy of it, restrict or object to how we use it, and withdraw consent you've given. Email privacy@aidfolk.com from the address on your account, and we'll answer within 30 days. You can also complain to your data protection authority.

If you chatted with an agent on a business's website, that business controls the conversation: contact them first. We'll help them handle your request.

Cookies and local storage

• This website sets no cookies.
• The app uses a cookie that keeps you signed in securely, a short-lived cookie during “Sign in with Google”, and one that remembers whether the sidebar is open. It keeps your light or dark theme and dismissed notices in your browser's local storage. Cloudflare's bot check on the sign-up page may set its own cookies to tell people from bots.
• The chat widget sets no cookies on the websites it runs on. It keeps the current conversation's session in local storage, cleared each time a page loads, and one display setting.

All of these are needed for the app or the widget to work; none are used for advertising or tracking.

International transfers

We and the companies above process data in several countries, including the United States and the European Union. Where data protection law requires it, transfers rely on safeguards such as the European Commission's standard contractual clauses in our providers' terms.

Children

Aidfolk is a business tool for people aged 18 and over. We don't knowingly collect data from children; if you believe a child has given us personal data, contact us and we'll delete it.

Changes to this policy

When we change this policy, we'll update the date at the top. If a change is significant, we'll tell account holders by email before it takes effect. Our security page describes how we protect data in more technical detail.

Contact

For anything about privacy or your data, email privacy@aidfolk.com. For everything else, support@aidfolk.com.