Privacy Policy

1. Introduction

Welcome to our Multi-Document RAG Application ("Service"). We are committed to protecting your privacy and ensuring you have a positive experience on our platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Password (encrypted)
• Username or display name
• Profile information (optional)

2.2 Document and Chat Data

When you use our Service, we collect and store:

• Documents you upload
• Questions you ask about your documents
• Chat conversation history
• Metadata associated with your documents (file names, upload dates, size)

3. How We Use Your Information

We use the collected information for:

• Providing and improving the Service
• User authentication and account management
• Processing documents and generating AI-powered responses
• Maintaining chat history and user preferences
• Communicating with you about your account and Service updates
• Analyzing usage patterns to improve Service quality
• Detecting and preventing fraud or security issues
• Complying with legal obligations

4. Data Storage and Security

4.1 Storage Location

Your data is stored in secure databases including MongoDB and Pinecone vector databases. Document embeddings are processed and stored to enable semantic search functionality.

4.2 Security Measures

We implement industry-standard security measures including:

• SSL/TLS encryption for data in transit
• Password hashing and encryption at rest
• Access controls and authentication tokens
• Regular security audits and updates
• Firewalls and intrusion detection systems

4.3 Data Retention

We retain your data for as long as your account is active. Upon account deletion, personal data will be removed within 30 days, though aggregated and anonymized data may be retained for analytics purposes.

5. Third-Party Services

Our Service utilizes the following third-party services:

• Pinecone: Vector database for document embeddings and semantic search
• MongoDB: Database for storing user accounts, chats, and messages
• LangChain: Framework for document processing and LLM integration

These third-party providers have their own privacy policies. We encourage you to review their privacy practices. We are not responsible for their data handling practices.

6. Your Rights and Choices

6.1 Access and Portability

You have the right to access your personal data and request a copy of the information we hold about you.

6.2 Correction and Deletion

You may update or delete your account information at any time through your account settings. You can also request complete deletion of your account and associated data.

6.3 Opt-Out

You can opt-out of non-essential communications through your account preferences.

7. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience. Cookies help us:

• Remember your login information
• Understand how you use the Service
• Improve Service functionality
• Personalize your experience

You can control cookie settings through your browser preferences.

8. Data Sharing and Disclosure

We do not sell or rent your personal information. We may share data:

• With third-party service providers who assist in operating the Service
• When required by law or legal process
• To protect our rights, privacy, safety, or property
• In connection with a merger, acquisition, or sale of assets

9. Children's Privacy

Our Service is not intended for users under 13 years of age. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will take steps to delete such information immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of material changes by posting the updated policy on our website and updating the “Last updated" date. Your continued use of the Service after changes become effective constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at: