Privacy Policy

This Privacy Policy explains how Anona Labs Inc. collects, uses, and protects personal information when you use our website and services (the "Service"). By using the Service, you agree to the practices described here.

1. Who we are

We are Anona Labs Inc., a company based in San Francisco, California, United States. This policy applies to https://anonalabs.com and the products and services we operate. For any question or request about this policy or your data, contact us at support@anonalabs.com. Anona Labs Inc. is responsible for your personal information.

2. Information we collect

We collect only what we need to operate the Service.

Account information

When you create an account, you sign up with an email address and password, or with a third-party provider (Google, GitHub, or Microsoft). If you use a provider, we receive basic profile information through it: your name, email address, and profile picture. We do not receive your provider password. If you create or join an organization, we also collect the organization's name.

Usage data

As you use the Service, we collect usage and diagnostic data such as the features you interact with, actions and timestamps, approximate device and browser information, IP address, and log data. This helps us operate, secure, and improve the Service.

Content you provide

We collect and store the content you or your applications submit to the Service through our website, APIs, and SDKs, such as memories, documents, and other data your applications record. This may include information about your end users. This content belongs to you, and we process it to provide the Service to you. End users should direct questions about their data to you, the application provider.

3. How we use information

We use personal information to:

• Provide, operate, and maintain the Service and your account.
• Authenticate you and keep your account and our systems secure.
• Communicate with you, including account and security notifications (such as sign-in alerts) and other messages about your account and use of the Service.
• Monitor, troubleshoot, analyze, and improve the Service, and develop new features.
• Detect, prevent, and address fraud, abuse, security incidents, and technical issues.
• Comply with legal obligations and enforce our terms.

Most emails we send are transactional messages related to your account and use of the Service. We may send you product updates and announcements, which you can opt out of at any time, and we do not sell, rent, or share your email address. If you ask us to stop sending a type of message, or report a message as spam, we treat that as a permanent opt-out. We do not use your personal information for third-party advertising.

4. How we share information

We do not sell or rent your personal information. We share it only with service providers who process it on our behalf to help us operate the Service, in categories such as:

• cloud hosting and infrastructure;
• authentication and identity;
• email delivery;
• security and content delivery;
• analytics.

These providers are bound by contract to protect your information and to use it only to provide services to us. We may also disclose information when required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Anona Labs Inc., our users, or others. If we are involved in a merger, acquisition, or sale of assets, we will continue to protect your information and notify you of any change in control or use.

5. Data retention

We keep personal information for as long as your account is active or as needed to provide the Service. After you delete your account, we delete or anonymize your personal information and stored content, including derived data such as search indexes, within 30 days of your request, except where we must retain certain data to comply with legal obligations, resolve disputes, or enforce our agreements. Residual copies may persist in encrypted backups, which are overwritten on a rolling cycle of up to 90 days.

6. Data security

We protect your information using industry-standard measures, including encryption in transit and at rest, access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to promptly address any issues. If a data breach affects your personal information, we will notify affected customers without undue delay and will notify the appropriate authorities as required by applicable law.

7. Cookies and similar technologies

We use a small number of first-party cookies and browser storage entries to keep you signed in, to remember interface preferences such as your theme, and to recognize a returning visitor for the product analytics described below. Our authentication and infrastructure providers may set cookies required for sign-in, session management, security, and performance. Other than the visitor identification described below, we do not use advertising or cross-site tracking cookies.

Product analytics. We use a third-party analytics provider to understand how our website and dashboard are used: which pages are opened, which controls are clicked, and where people get stuck. Analytics events describe the interaction, not the content on the screen: text and form values are masked before an event is sent. On some pages that do not display your stored content or API keys, we may also record a replay of the page, with form fields masked, so we can see where a sign-up or an upgrade goes wrong. The provider processes this data on our behalf in the United States.

Visitor identification. On our public website we use Apollo.io's website tracker to recognize the companies, and where possible the individuals, that visit. It records the pages you open, the referring site and campaign parameters, and an anonymous identifier stored in your browser. It may also load LiveIntent's identity service, which matches your browser against hashed email addresses from LiveIntent's network and shares a hashed email with Apollo. We use this to prioritize sales outreach. Both providers process this data in the United States.

8. Your rights and choices

Depending on where you live, you may have the right to access, correct, update, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can exercise these rights at any time.

To request deletion of your account and data, or to exercise any other right, email us at support@anonalabs.com. We will verify your request and respond within the time required by applicable law. We will not discriminate against you for exercising your rights.

9. California privacy rights

If you are a California resident, California law may give you the right to know what personal information we collect and how we use it, to request access to or deletion of it, to correct it, and to opt out of its "sale" or "sharing". We do not sell or share your personal information. We collect the categories described in Section 2, from you directly, from your sign-in provider, and automatically as you use the Service, and we disclose them only to the service providers described in Section 4. To exercise your rights, or to have an authorized agent do so, contact support@anonalabs.com. We will not discriminate against you for exercising them.

10. International users and data transfers

We operate in the United States and offer the Service from the United States, where we store and process personal information. The Service is not directed to individuals in the European Economic Area or the United Kingdom. If you access the Service from elsewhere, your information will be transferred to and processed in the United States, where data-protection laws may differ from those in your country, and by using the Service you accept that. Where the law of your country gives you rights over your personal information, you can exercise them by contacting support@anonalabs.com.

11. Children's privacy

The Service is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided us personal information, contact support@anonalabs.com and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above and, for material changes, provide a more prominent notice. Your continued use of the Service after an update means you accept the revised policy.

13. How to contact us

Anona Labs Inc.

San Francisco, California, United States

Email: support@anonalabs.com

Web: https://anonalabs.com

Schedule A: Anona Memory

This Schedule describes how the sections above apply to Anona Memory. If we offer other products, each will have its own schedule.

What we store. When you or your applications use Anona Memory, we store the material you submit, the Memories extracted from it, the syntheses derived from those Memories, and any identifiers you attach, such as a user, agent, or session identifier. This is the content described in Section 2, and it belongs to you. Each organization's content is kept separate from other organizations' content and is encrypted at rest.

How we access it. We access the content of your Spaces only to operate the Service, for example to extract Memories, run the searches you request, consolidate syntheses, and troubleshoot problems. We do not use it to train AI models. The AI model providers we use receive content in order to process your requests, and we do not share it with them for the purpose of training their models.

Model provider credentials. We hold the credentials for the AI model providers the Service uses. They are encrypted at rest and are never shared with customers or disclosed to anyone other than the provider that issued them.

Deleting and exporting. You can export or delete a Space you own from the dashboard at any time. Deleting a Space removes its Memories and the syntheses derived from them on the schedule described in Section 5.

Where it is stored. Anona Memory stores and processes content in the United States, as described in Section 10.