Privacy Policy

This Privacy Notice for Assista Inc ('Assista', 'Company', 'we', 'us', or 'our'), describes how and why we might collect, store, use, and/or share ('process') your personal data when you use our Assista Platform or Website ('Services'), such as when you:

• Sign up for and use our Platform or any other Assista application
• Engage with us in other related ways, including sales, marketing, or events
• Use our Website

Questions or concerns? If you do not agree with our policies and practices, please do not use our Services. Contact us at [email protected].

Summary of Key Points

What Personal Data Do We Collect?

Personal Data Collected Directly From You

Personal Data Collected Automatically

• Log Data: IP address, browser type, operating system, referring URLs, pages visited, timestamps
• Cookies: We use cookies and similar technologies. See our Cookie Policy for details.

Personal Data from Third Parties

When you connect third-party services to Assista, we may receive account information, data from integrated platforms (Google Services, Notion, HubSpot, etc.), and authentication tokens.

How We Use Your Personal Data

• To Provide Services: Account management, customer support, service functionality
• To Improve Services: Analyze usage patterns and enhance user experience
• To Communicate: Service-related notices, respond to inquiries, customer support
• To Process Payments: Complete transactions and maintain billing records
• For Security: Detect, prevent, and respond to security incidents and fraud
• Legal Compliance: Process data when required by law
• With Consent: Other purposes with your explicit consent

Artificial Intelligence and Automated Processing

The Assista Platform uses artificial intelligence ("AI") technologies, including third-party large language models provided by Anthropic (Claude), to deliver its core functionality. This section explains how AI is used in relation to your personal data.

How We Use AI

• Task Execution: AI agents process your instructions to perform actions across connected third-party services (e.g., sending emails, creating calendar events, managing tasks)
• Content Generation: AI generates text, summaries, and responses based on your requests and the context of your conversations
• Tool Selection: AI determines which connected services and actions are appropriate to fulfill your requests
• Conversation Context: AI retains the context of your conversations within each session to provide coherent and relevant responses

Execution Modes

The Platform offers different execution modes that determine how much oversight you maintain over AI actions:

• Guided Mode: You are prompted to review and approve actions before they are executed, particularly for sensitive operations such as sending messages, modifying data, or making purchases
• Autonomous Mode: With your explicit consent, the AI may execute certain actions on your behalf without individual confirmation. You may change your execution mode at any time

Third-Party AI Providers

We use AI models provided by Anthropic, PBC ("Anthropic"). When you interact with the Platform, your instructions and relevant context are sent to Anthropic's API to generate responses and determine actions. Anthropic processes this data in accordance with their own privacy policy and data processing terms. Your data is not used by Anthropic to train their AI models.

AI Limitations and Your Responsibilities

AI-generated outputs may be inaccurate, incomplete, or inappropriate. You are responsible for reviewing AI outputs and actions, particularly when operating in autonomous mode. We recommend using guided mode for high-stakes operations involving financial transactions, sensitive communications, or irreversible actions.

Your Rights Regarding Automated Processing

Under the GDPR (Article 22), you have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significant effects concerning you. The Assista Platform does not make decisions of this nature. You maintain control over all actions through your choice of execution mode and connected services. You may contact us at [email protected] to request human review of any automated decision.

Legal Basis for Processing

• Contractual Necessity: Processing necessary to perform our contract with you
• Legitimate Interests: Processing necessary for our legitimate business interests
• Legal Compliance: Processing necessary to comply with legal obligations
• Consent: Processing based on your explicit consent, which you may withdraw at any time

Data Sharing and Disclosure

We may share your personal data with:

• Service Providers: Payment processing, data analytics, email delivery, hosting, customer support
• Business Partners: Companies we partner with for joint products or services
• Legal Requirements: Authorities when required by law or to protect our rights
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• With Consent: Other parties when you have given consent

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

International Data Transfers

Your personal data may be transferred to countries other than your country of residence. We implement appropriate safeguards including Standard Contractual Clauses approved by the European Commission.

Your Rights

Depending on your location, you may have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request restriction of processing
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Lodge a Complaint: Complain to a supervisory authority

To exercise any of these rights, contact us at [email protected].

Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Regular security assessments and testing
• Access controls and authentication procedures
• Employee training on data protection
• Incident response procedures

Children's Privacy

Our Services are not directed to children under 18. We do not knowingly collect personal data from children. If we become aware of such collection, we will delete it promptly.

Third-Party Links and Services

Our Services may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website.

California Privacy Rights

California residents may have additional rights under the CCPA, including the right to know what personal information we collect, request deletion, opt-out of sales, and non-discrimination.

European Economic Area (EEA) Residents

For EEA residents, our representative for data protection matters is:

Sub-processors

We use the following third-party service providers (sub-processors) to process personal data on our behalf:

We ensure all sub-processors provide adequate data protection guarantees through contractual arrangements including, where applicable, Standard Contractual Clauses.

Contact Us

If you have any questions about this Privacy Policy, please contact us: