Privacy Policy

1. Information we collect

• Account information. Your email address and name, and — if you sign in with Google — your Google profile picture. If you upload a profile photo, we store it. We record when your account was created and when you last signed in.
• Sign-in. Sign-in is handled by Amazon Cognito, with Google sign-in or an email address and password. We never see or store your password; when you use Google, we receive only your name, email address and profile picture.
• Connected storage. The locations you connect a workspace to (an Amazon S3 bucket, Google Drive, Microsoft OneDrive or Box) and the credentials needed to read them — OAuth tokens, or an access key you provide for your own S3 bucket.
• Document index. For each file we index: its name, location, size, page count, a content fingerprint and descriptive metadata such as title, author, date and document type; the extracted text, divided into passages; and numerical representations of those passages (“embeddings”) used for search.
• Questions, answers and results. The questions you ask, the answers and citations produced, the record of the steps the assistant took to reach them, and files it generates for you, such as Excel workbooks.
• Feedback. If you rate an answer or send a comment about it, we keep the rating, your comment and a copy of the question and answer it refers to.
• Workspace and billing records. Workspaces you own or belong to, your role in each, invitations you send or receive, and a usage record of each AI request (which user, workspace and model, and how much it cost — not its content). For billing: your Stripe customer reference, your credit balance and its history, and — if you turn on automatic top-up — your card’s brand and last four digits.
• Technical information. Information your browser sends with each request, such as IP address, browser type and request times, as recorded in our servers’ operational logs.

We do not receive or store your full card number; payments are processed by Stripe.

2. How your documents are handled

PageFinder does not keep copies of your original files. It reads a file from your connected storage when indexing it and when you open or cite a page, and stores only the index described above. Three things exist briefly or as derivatives, and we list them so the statement above is exact:

• Processing copies. While a file is being indexed, its contents pass through temporary working storage and, for some files, an encrypted staging location. These copies are deleted when indexing finishes; staging copies that are not are removed automatically within one day.
• Previews. To show you a page, we may keep a PDF rendering of an Office document and small page thumbnails, so that the same file does not have to be converted again.
• Generated files. Workbooks and other files the assistant creates for you are stored until you delete the conversation they belong to.

Access to your storage is read-only in practice: PageFinder requests read-only permission where the provider offers it (Google Drive and Microsoft OneDrive), and it never edits, moves or deletes your files.

3. How we use information

• To index your documents, answer your questions, cite sources and generate the files you ask for.
• To let you share a workspace with the people you invite, within the role you give them.
• To run your account: sign-in, credit balance, top-ups, subscriptions and invoices.
• To keep the Service secure and working, investigate problems and prevent abuse.
• To improve answer quality, using the feedback you choose to send.
• To comply with the law.

We do not sell your personal information, we do not use it for advertising, and we do not use your documents, questions or answers to train AI models.

4. AI providers

To read pages and answer questions, the Service sends the relevant passages, page images and your question to an AI model, over an encrypted connection and only to produce your result. Which provider receives it depends on the model your workspace uses:

• Amazon Bedrock (default). Search embeddings, and the models offered by default — including Anthropic Claude and OpenAI GPT models — run in Amazon Web Services in the United States. Under AWS’s terms, Bedrock does not share your content with the model’s developer or use it to train models.
• Google Gemini (only if chosen). If a workspace administrator selects a Gemini model, that workspace’s requests are sent to Google’s Gemini API under Google’s paid-service terms, which do not permit using them to train Google’s models. Otherwise nothing is sent to Gemini.

AI output can be wrong. Each answer cites the pages it relied on so that you can check it against the original.

• Amazon Bedrock data protection
• AWS Privacy Notice
• Gemini API additional terms

5. Google user data

If you connect Google Drive, PageFinder requests read-only access to the files you choose to index. We use that access only to index those files and show them to members of your workspace, as described in this policy. PageFinder’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google user data for advertising, sell it, or use it to train general-purpose AI models, and people at Auriq Systems Inc. do not read it except with your permission, for security, or as the law requires.

When you disconnect Google Drive from a workspace, delete the workspace or delete your account, PageFinder revokes its access at Google — unless another of your workspaces is still connected to the same Google account. You can also remove PageFinder’s access yourself at any time from your Google Account’s security settings.

• Google API Services User Data Policy

6. Who we share information with

We share information only in these cases:

• Members of your workspace. People you invite can see the workspace’s documents and conversations according to their role. An invitation email shows your name and the workspace’s name to the person invited.
• Service providers. Amazon Web Services (hosting, storage, sign-in, email and AI models), Stripe (payments), Google (sign-in, and Gemini if your workspace chooses it), and the storage providers you connect (Google, Microsoft, Box). Each processes information only to provide its service to us.
• Legal reasons. When required by law or legal process, or to protect the rights, safety or property of our users, the public or ourselves.
• Business transfers. If we are involved in a merger, acquisition or sale of assets, information may transfer as part of it, subject to this policy.

7. Security

• All traffic to the Service uses HTTPS (TLS).
• Everything the Service stores is encrypted at rest: its databases, the search index, generated files, previews, staging copies, archives, and the access tokens for the storage you connect.
• Access keys you give us for your own S3 bucket are encrypted before they are stored, and are never shown back in full.
• Every request is checked on the server against your workspace membership and role; one workspace cannot reach another’s documents.
• Sessions use a signed, HTTP-only cookie that expires after seven days.

No system is perfectly secure. If we learn of a breach affecting your information, we will notify you as the law requires.

8. Retention and deletion

• Conversations. Kept until you delete them, or for about two months, whichever comes first. A deleted conversation’s questions, answers and steps are removed; what is kept is only a record that it took place — who, in which workspace, and when — with none of its content.
• Document index. Kept while the file is in a connected source. Removing documents from a workspace, or deleting the workspace, deletes their index; your original files are never touched.
• Workspaces. Deleting a workspace removes its index, conversations, members, invitations and its connection to your storage, including stored tokens.
• Your account. You can delete your account from My account at any time. This deletes your profile and sign-in identity and any workspace and billing account that only you own. Active subscriptions end immediately, and unused credit is forfeited.
• What deletion keeps. Usage and billing records, and the bare records that conversations took place, are kept for accounting, tax and fraud prevention; none of them carry document content. Feedback you sent on answers is deleted with your account, including in workspaces you shared with others.

9. Cookies and similar technologies

The Service uses only the cookies it needs to work: one that keeps you signed in, and a short-lived one that protects the sign-in step. Your browser also remembers interface choices, such as the workspace you last used. We do not use advertising or analytics cookies or third-party trackers.

10. Your choices and rights

• See and correct your name and photo, and delete your account, in My account.
• Disconnect a storage source or delete documents, conversations and workspaces you own at any time.
• Revoke PageFinder’s access from your Google, Microsoft or Box account settings.
• Depending on where you live — including California and the European Economic Area — you may have the right to access, correct, delete or receive a copy of your personal information, and to object to or restrict some processing. Email pagefinder@auriq.com and we will respond within the time the law requires. We will not discriminate against you for exercising these rights.

11. Where information is processed

The Service is operated in the United States, and information is stored and processed there. If you use it from elsewhere, your information is transferred to the United States.

12. Children

The Service is meant for business use and is not directed to children. We do not knowingly collect information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.

13. Private deployments

Organisations can run PageFinder inside their own environment, with AI models hosted locally and no third-party AI provider. In a private deployment, the organisation controls its data and its own agreement with us governs it, rather than this policy.

14. Changes to this policy

We may update this policy. We will post the new version here with a new effective date, and tell account owners in advance of any material change.

15. Contact us

Questions or requests about this policy: pagefinder@auriq.com. Auriq Systems Inc., Los Angeles, California, USA.