Privacy Policy

This policy applies to information we process when you visit our marketing pages, create an account, or use the Service. It does not apply to third-party websites or services we link to. If you use the Service on behalf of an organization, the organization is the controller of the customer data it submits, and we process that data on its behalf.

• Account information. Name, email address, and organization details, provided through our authentication provider when you sign up.
• Billing information. Plan, subscription status, and a billing-customer identifier from our payment processor. We do not receive or store full payment-card numbers.
• Customer content. The client records, agent configurations, system prompts, phone numbers, scenarios, and other content you submit to run tests.
• Test data. Simulated conversation transcripts, scores, findings, suggested prompt revisions, and — for voice tests — call identifiers, call metadata, and any recording URLs returned by our telephony provider.
• Usage & device data. Log data such as IP address, browser type, timestamps, and actions taken, used to operate, secure, and improve the Service.

AI Rx tests conversations between an automated tester and the AI agent you configure; no real end customer interacts with the Service. You should not submit sensitive personal information that is not necessary to test your agent.

• provide, maintain, and secure the Service;
• run tests, generate reports, and synthesize prompt revisions;
• process billing and manage subscriptions;
• send transactional email such as test digests and billing notices;
• monitor for abuse, enforce usage limits, and protect the Service and its users;
• comply with legal obligations and enforce our Terms.

To run tests and generate scores and recommendations, we send relevant content (such as the agent prompt and simulated transcript) to third-party AI model providers on a server-to-server basis. We do not use this content to train our own models. Our AI providers process the content under their applicable terms to return results to us.

We share information only as described here:

• Service providers who host, store, process, or transmit data on our behalf (see below), under contracts that limit their use of the data;
• At your direction — for example, when you create a public share link to a report, anyone with that link can view the scores and findings it contains;
• Legal & safety — when required by law or to protect rights, safety, and the integrity of the Service;
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

We rely on established providers for application hosting, database, authentication, billing, AI models, outbound voice telephony, and transactional email. The categories of providers and the data each handles are summarized on our Security & data page. For a current subprocessor list or a Data Processing Addendum, contact us.

We retain your tenant data for the life of your account so you can keep your testing history, and for a reasonable period afterward as needed to comply with legal, accounting, or security obligations. You can request deletion as described below; deleting a client cascades to its prompt versions and test runs.

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise these rights, email privacy@mindbotics.ai. We will respond consistent with applicable law and may need to verify your identity. We will not discriminate against you for exercising these rights.

We use technical and organizational measures to protect information, including encryption in transit and at rest, tenant isolation, and server-side access to data. No method of transmission or storage is completely secure; you are responsible for keeping your account credentials confidential. See our Security & data page for details.

The Service is not directed to children under 18, and we do not knowingly collect personal information from them.

We operate the Service from the United States, and your information may be processed there and in other countries where our providers operate. By using the Service, you understand your information may be transferred to and processed in the United States.

We may update this Privacy Policy from time to time. We will update the effective date above and, for material changes, provide additional notice where appropriate.

Privacy questions or requests: privacy@mindbotics.ai.