Privacy Policy

1. Overview

InvestigAItor (“we”, “us”, or “our”) provides enterprise AI activity monitoring software. This Privacy Policy describes how we collect, use, and protect information in connection with our browser extension, admin dashboard, and related services.

2. Information We Collect

Account information: When you create an account, we collect your name, work email address, and organization name.

Activity data:The browser extension collects AI platform interaction events (URLs visited, platforms accessed, event timestamps) on behalf of your organization. This data is processed and stored under your organization’s control.

Device information: Device names and identifiers for registered endpoints are collected to support deployment management.

3. How We Use Information

• To deliver and operate the InvestigAItor platform
• To authenticate users and enforce organization-level access policies
• To generate activity reports and analytics for authorized administrators
• To send transactional emails (account verification, billing notices)
• To improve and develop our services

4. Data Ownership and Control

Activity data collected by the browser extension belongs to your organization. As the account administrator, you control who can access this data within your instance. We process this data solely to provide the service and do not sell or share it with third parties for advertising purposes.

5. Data Security

We use industry-standard security measures including encryption in transit (TLS), encryption at rest, row-level security, and access controls. All data is stored in Supabase-hosted infrastructure with strict access policies.

6. Data Retention

We retain account data for the duration of your subscription plus 30 days after cancellation. Activity event logs are retained for 12 months by default. You may request earlier deletion by contacting us.

7. Employee Monitoring Disclosure

InvestigAItor is intended for use in accordance with applicable employment law. Organizations deploying the extension are responsible for providing appropriate notice to employees as required by their jurisdiction (e.g., GDPR, CCPA, state electronic monitoring laws). We recommend consulting legal counsel before deployment.

8. Your Rights

Depending on your location, you may have rights to access, correct, or delete personal data we hold about you. To exercise these rights, contact us at [email protected].

9. Changes to This Policy

We may update this policy from time to time. We will notify account administrators of material changes by email at least 14 days before they take effect.

10. Contact

Questions about this policy? Email us at [email protected].