Privacy Policy

This Privacy Policy explains how AIUI inc. ("we", "us", or "our") collects, uses, and shares information when you use Permissible (the "Service") at permissible.io and through related channels such as email and SMS. By using the Service, you agree to this Policy and to our Terms of Service.

1. Information We Collect

Account and identity information. When you create an account or contact us through a channel, we collect identifiers such as your name, email address, and — if you choose phone-based access — your phone number, along with verification status. You may use the Service initially as a guest, in which case we assign a temporary anonymous identifier until you verify an email or phone number.

Content you create. We collect the information you provide while using the Service, including your questions and messages, project details, load and route information (such as origins, destinations, waypoints, and dimensions), notes, and the conversation history associated with your projects across web, email, and SMS.

Technical and usage information. We automatically collect information such as your IP address, approximate region, device and browser (user-agent) information, session tokens, and logs of your interactions with the Service. This supports authentication, security, rate limiting, and reliability.

Communications. When you contact us, we keep your messages and contact details so we can respond.

We do not intentionally collect sensitive personal information, and you should not submit it through the Service.

2. How We Use Information

We use information to:

• provide, operate, and maintain the Service, including answering your questions and managing your projects and conversations;
• authenticate you, secure the Service, enforce limits, and prevent abuse;
• generate informational responses, which involves processing your inputs through automated and AI systems and the providers described below;
• communicate with you about the Service, including verification messages and responses on the channel you used; and
• maintain, debug, analyze, and improve the Service, and comply with legal obligations.

3. AI Processing and Service Providers

To run the Service we share information with third-party providers ("processors") who process it on our behalf. These include:

• Cloudflare — our hosting and infrastructure provider, which runs the Service's compute, databases, storage, and messaging at the network edge, and processes account, content, and technical data accordingly.
• AI provider(s) — the model provider(s) behind our chat and extraction features process your questions and related content to generate responses. We route these calls through a gateway that we operate.
• Mapping and routing provider — when you build a route, we send the origin, destination, and waypoints you provide to a mapping/routing provider to geocode locations and compute routes and the jurisdictions they cross.
• SMS provider — if you use phone-based access, we share your phone number and message content with our SMS provider to deliver one-time codes and replies.

These providers are authorized to use the information only to provide their services to us, subject to their own terms and privacy practices. We do not control their independent practices.

4. How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only:

• with the service providers described above, to operate the Service;
• to comply with law, legal process, or enforceable governmental requests;
• to protect the rights, property, or safety of AIUI inc., our users, or the public, and to enforce our Terms; and
• in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this Policy or notify you of any material change.

5. Data Retention

We retain your information for as long as your account is active and as needed to provide the Service. Projects and conversations may be archived (soft-deleted) so they can be recovered, which means data may persist after you remove it from view. We retain information as needed to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion as described below.

6. Security

We use reasonable technical and organizational measures — including the security features of our infrastructure provider, access controls, and authentication — to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

7. Your Choices and Rights

You can:

• access and update certain account information through the Service;
• archive or stop using projects and conversations; and
• request a copy of, correction of, or deletion of your personal information by emailing us at support@permissible.io.

Depending on where you live (for example, under the EU/UK GDPR or the California Consumer Privacy Act, as amended), you may have additional rights — such as to access, correct, delete, port, or restrict processing of your personal information, to object to certain processing, and to not be discriminated against for exercising these rights. To exercise any right, contact us at the email above; we will verify your request and respond as required by applicable law. Where we rely on consent, you may withdraw it at any time.

8. Cookies and Local Storage

We use cookies and similar local-storage technologies that are necessary to operate the Service — for example, to keep you signed in and to maintain session security. We do not use them for third-party advertising. You can control cookies through your browser settings, but disabling necessary cookies may prevent the Service from working.

9. International Users and Data Location

The Service is operated from, and information is processed in, the United States and other locations where our infrastructure and providers operate. If you access the Service from outside the United States, you understand that your information may be transferred to and processed in countries whose data-protection laws may differ from those of your country.

10. Children's Privacy

The Service is not directed to children, and is intended only for users 18 and older. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

11. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after a change takes effect constitutes acceptance of the updated Policy.

12. Contact

For privacy questions or requests, contact AIUI inc. at support@permissible.io.