This Privacy Policy explains how SubAssembly AI collects, uses and shares information when you use subassembly.ai and the SubAssembly AI platform (the "Service"). It applies to visitors, account holders and the people they invite.
Information we collect
Account information: name, work email, password (stored as a hash), company and plant names, role, and — if you enable the voice line — your mobile number and a voice PIN (stored as a hash). Customer Data: the files, spreadsheets, descriptions, plant structure, knowledge notes and other content you upload or enter, and the applications generated from them. Usage information: pages visited, features used, builds run, voice calls (caller number, duration, transcript, data retrieved), timestamps, approximate location derived from IP address, browser and device type, and error logs. Communications: contact-form submissions, support requests and emails you send us. Payment information is handled by our payment processor if and when card payments are enabled; we do not store full card numbers.
How we use it
To provide, operate, secure and improve the Service; to generate applications and output from your Customer Data; to respond to your requests; to send service, security and account messages; to understand usage in aggregate; to detect abuse; and to comply with law. We do not sell personal information and we do not use your Customer Data to train the AI models we use.
AI processing
To generate output, your descriptions and relevant portions of Customer Data are sent to third-party AI model providers that process them on our behalf under contractual terms that prohibit using the data to train their models. Currently these are Anthropic (application generation and analysis) and OpenAI (the optional voice line, which converts speech to text and text to speech and answers questions about your plant). If you use the voice line, call audio, transcripts, the caller's phone number and the plant data retrieved to answer are processed by OpenAI and by our telephony provider (Twilio), and a transcript and log of what was retrieved is stored in your workspace where administrators can review it. Do not include information in the Service that you are not permitted to share with such processors.
Who we share it with
Service providers that host, store, process or secure data for us (cloud infrastructure, email delivery, analytics, AI models, payment processing), bound by confidentiality; your organization's administrators, who can see the users, apps and data in their workspace; parties to a merger, acquisition or financing; law enforcement or regulators when required by law or to protect rights and safety; and anyone you direct us to share with (for example, a shared app link).
Cookies and analytics
We use essential cookies for sign-in and security, and Google Analytics on our public marketing pages to understand traffic. You can control cookies in your browser; blocking essential cookies will prevent sign-in.
Security
We use encryption in transit, access controls, tenant isolation and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your credentials and for maintaining independent backups of important data.
Retention
We keep account and Customer Data while your account is active and for a reasonable period afterward for backup, legal and audit purposes, then delete or anonymize it. Audit logs and usage records may be retained longer as required by law or for security.
Your choices and rights
You can update account details in Settings, export your applications, and delete apps, plants or your organization from within the Service. Depending on where you live you may have rights to access, correct, delete or port personal information, or to object to or restrict processing; to exercise them email info@subassembly.ai. We will respond within the time required by applicable law. California residents: we do not sell or share personal information for cross-context behavioral advertising. EEA/UK residents: our legal bases are contract performance, legitimate interests in operating and securing the Service, and consent where required; data may be transferred to the United States under appropriate safeguards.
Children
The Service is for businesses and is not directed to anyone under 18. We do not knowingly collect personal information from children.
Changes
We may update this policy; the date at the top reflects the latest version. Material changes will be announced on the Service or by email.
Contact
SubAssembly AI, a Michigan company · info@subassembly.ai · Operating office: Austin, Texas, USA.