Illuminatai
Sign inRequest pilot

Last updated: 10 September 2025

Privacy Policy

This Privacy Policy explains how Illuminatai, LLC ("IlluminatAI", "we", "us", or "our") collects, uses, discloses, and protects information when you use the IlluminatAI website and application (the "Service"). This policy is designed to comply with applicable U.S. privacy laws, including the California Consumer Privacy Act as amended by the CPRA ("CCPA"/"CPRA"), and similar U.S. state privacy laws (e.g., in VA, CO, CT, UT). We do not currently claim compliance with the EU/UK GDPR. If we extend services to EU/UK residents, we will update this policy and our practices accordingly.

Who We Are

Data Controller: Illuminatai, LLC
Registered Office: 131 Continental Dr, Suite 305, Newark, DE 19713, New Castle County, USA

Notice at Collection (Categories & Purposes)

We collect the following categories of personal information for the purposes listed below:

  • Identifiers (e.g., email address, account ID): create and maintain your account; secure authentication; provide Service features; communicate with you.
  • Customer records (basic profile details you provide, e.g., name, company profile fields): personalise your experience and board simulations.
  • Content you provide (chat prompts, conversation content, uploaded documents, extracted text, summaries): operate the Service (chat history, simulations, document summarisation) and at your request send content to AI providers to generate outputs.
  • Commercial information (credit purchases and related metadata): process payments and provide credit balances.
  • Internet/technical information (IP address, user agent, security signals, CAPTCHA results): secure the Service, rate limiting, fraud/abuse prevention, logging.
  • Inferences (none generated for advertising; limited operational inferences like session unread status only).

We do not collect sensitive personal information as defined by the CPRA (e.g., precise geolocation, biometric identifiers) for the purpose of inferring characteristics. We do not profile users for targeted advertising.

How We Use Information

  • Provide core features (authentication, chat history, roundtable simulations, document handling, summarisation on request).
  • Process payments and credits via Stripe.
  • Prevent fraud/abuse and ensure Service integrity (rate limiting, CAPTCHA, audit logs).
  • Communicate transactional messages (e.g., access codes, receipts).
  • Comply with legal obligations and enforce terms.

Disclosures to Service Providers/Processors

We disclose personal information to service providers who process it on our behalf for the following purposes:

  • Supabase (auth, database, storage): account data, chat content, documents, and session metadata.
  • OpenAI (AI responses and summarisation): prompts, conversation context, and extracted document text you submit for AI output.
  • Stripe (payments): checkout session data and metadata (e.g., user ID, email, credit amount). Card data is handled by Stripe.
  • Resend (email delivery): recipient email and message content for transactional emails.
  • Upstash (rate limiting): identifiers for rate-limiting windows (e.g., IP or user ID).
  • hCaptcha (bot protection): CAPTCHA token validation.
  • Tavily (optional web search): if enabled by query classification, search queries and results may be processed to enhance answers.

No Sale or Sharing for Cross-Context Behavioral Advertising: We do not "sell" personal information or "share" it for cross-context behavioral advertising as defined under U.S. state privacy laws.

Cookies

We use strictly necessary, first-party cookies for authentication and session continuity (Supabase auth tokens). We do not use analytics or advertising cookies. See our Cookie Policy for details.

Data Retention

We retain personal information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Chat history and uploaded documents are retained to provide your in-product history and features and are deleted when you delete your account. We may retain limited security logs for a reasonable period for fraud and abuse prevention.

Security

We implement reasonable administrative, technical, and physical safeguards appropriate to the nature of the data, including HTTP-only cookies, encryption in transit, content security policy (CSP), HSTS, CSRF protection, rate limiting, audit logging, and database row-level security. No method of transmission or storage is 100% secure.

Your Privacy Rights (U.S.)

Depending on your state of residence, you may have the following rights:

  • Access/Know: request disclosure of the categories and specific pieces of personal information we collected about you.
  • Deletion: request deletion of personal information we collected from you (subject to exceptions).
  • Correction: request correction of inaccurate personal information.
  • Portability: request a copy of your personal information in a portable format.
  • Opt-Out of Sale/Sharing/Profiling: we do not sell or share personal information for targeted advertising, nor engage in profiling for decisions producing legal or similarly significant effects.
  • Limit Use/Disclosure of Sensitive Information: not applicable as we do not collect sensitive categories for inferring characteristics.
  • Non-Discrimination: you will not be discriminated against for exercising your rights.

How to Submit a Request: Email support@illuminatai.ai or use in-product account deletion (Settings → Account). We will verify your request (for example, by requiring you to be logged in or by email verification) and respond consistent with applicable laws. You may use an authorized agent; we may require proof of authorization and your verification.

Appeals: If we deny a rights request, you may appeal by replying to our decision email with "Appeal" in the subject. We will inform you in writing of any action taken on the appeal and provide further recourse information as required by law.

Children’s Privacy

The Service is intended for users aged 18 and over and is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child provided personal information, contact us to request deletion.

International Users

We are based in the United States and process information in the U.S. If you access the Service from outside the U.S., you understand your information may be transferred to, stored in, and processed in the U.S. and other countries where our service providers operate.

Changes to This Policy

We may update this policy to reflect changes to our practices or legal requirements. Material changes will be posted on this page with an updated date.

Contact Us

Illuminatai, LLC
131 Continental Dr, Suite 305
Newark, DE 19713, USA
Email: support@illuminatai.ai