Privacy Policy
Last updated: December 2024
Overview
RAGaaS ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our service.
Information We Collect
Account Information
- Email address
- Company name (if applicable)
- Billing information (processed by Paddle)
- IP address and location data for tax purposes
Usage Data
- API usage statistics
- Error logs
- Performance metrics
- Service access patterns
Payment Information
Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders.
When processing your payment, Paddle.com may collect:
- Name and address
- Email address
- Payment method details
- Transaction information
- Tax jurisdiction information
This information is collected and processed according to Paddle's Privacy Policy.
Your Content
- We do NOT store your documents or embeddings
- All content processing is temporary
- Data is stored exclusively in your infrastructure
- You retain full control and ownership
How We Use Information
We use collected information to:
- Provide and maintain the Service
- Process payments through Paddle
- Send service updates and notifications
- Monitor and improve performance
- Prevent abuse and fraud
- Comply with legal obligations
- Calculate applicable taxes
Data Storage and Security
Your Content
- Documents and embeddings are processed temporarily
- All data is stored in your infrastructure
- We maintain no persistent copies
- You retain full control and ownership
Account Data
- Stored securely using industry standards
- Encrypted in transit and at rest
- Access limited to authorized personnel
- Regular security audits
Third-Party Services
Payment Processing
- Payments handled by Paddle.com
- Subject to Paddle's privacy policy
- We don't directly store payment details
- Paddle acts as Merchant of Record
Infrastructure
- We use cloud providers with SOC 2 compliance
- All processing happens in secure environments
- Regular security assessments
Your Rights
You have the right to:
- Access your account data
- Request data deletion
- Export your data
- Close your account
- Object to processing
- Lodge complaints with supervisory authorities
Data Retention
- Account data: Retained while account is active
- Usage logs: 30 days
- Billing records: As required by law (minimum 7 years)
- Your content: Not stored by us
- Payment information: Retained by Paddle according to their policy
International Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.
Children's Privacy
We do not knowingly collect data from children under 13. If you become aware that a child has provided us with information, contact us to have it removed.
Changes to Policy
We may update this policy occasionally. We will notify you of significant changes via email or through the Service.
Contact Us
For privacy-related inquiries:
- Email: [email protected]
For billing and payment inquiries, please contact Paddle.com.