Personal Data We Collect
1.1 Data You Provide Directly
- Identity & Contact Data: Your name, email address, and phone number collected when you register for an account or request information about our Services.
- Payment Information: Billing details collected when you purchase access to Interro AI products and services.
- Inputs & Outputs: Content you submit to our AI services, including prompts, chat sessions, coding sessions, file uploads, and agentic interactions, along with the AI-generated responses produced. If your inputs contain personal data, that data may appear in outputs.
- Feedback: Ratings, thumbs-up/thumbs-down signals, and other feedback you submit about AI responses. When you rate a response, the related conversation is stored as part of your feedback record.
- Communications: Name, contact details, and message content from your direct communications with us, including support tickets and help-center chats.
1.2 Data Collected Automatically
- Device & Connection Data: Device type, operating system, browser, IP address, device identifiers, mobile network, ISP, time zone, and coarse device location derived from your IP address.
- Usage Data: Dates and times of access, browsing history within our Services, links clicked, pages viewed, and interaction patterns.
- Log & Troubleshooting Data: Error logs, application state at time of error, feature usage at time of error, and diagnostic information.
- Cookies & Similar Technologies: We and our service providers use cookies, scripts, and similar tracking technologies to recognize you, personalize your experience, and analyze usage. See our Cookie Policy for controls and opt-out options.
1.3 Data Used for Model Training
We may use the following data categories to train and improve our AI models:
- Publicly available internet data
- Commercially licensed third-party datasets
- User-provided inputs and outputs (where you have not opted out)
- Explicit user feedback submitted through our Services
- Content flagged for safety, security, or policy review
- Internally generated training data
How We Use Your Personal Data
We use personal data for the following purposes:
- Providing, maintaining, and facilitating products and services governed by our Terms of Service
- Offering optional features and platform enhancements
- Communicating with you, including service announcements and marketing (where permitted)
- Creating and administering your account
- Processing payments for our products and services
- Detecting and investigating fraud, abuse, policy violations, and unauthorized access
- Resolving disputes and security incidents
- Debugging and repairing errors that impair functionality
- Conducting research and improving our AI models and Services
- Enforcing our Terms of Service, Usage Policy, and related agreements
We may use your inputs and outputs to train AI models and improve our Services unless you opt out via your account settings. Even if you opt out, we may use inputs and outputs: (1) flagged for safety review to improve harmful-content detection, or (2) explicitly reported by you through feedback mechanisms.
How We Share Personal Data
3.1 Routine Disclosures
- Affiliates & Corporate Partners: Personal data is shared among Interro AI's affiliated and related entities for the purposes described in this Policy.
- Service Providers & Business Partners: We share personal data with vendors and partners for hosting, compliance, research, auditing, data processing, and service delivery.
3.2 Other Disclosures
- Corporate Transactions: If Interro AI is involved in a merger, acquisition, bankruptcy, or asset transfer, your personal data may be transferred as part of that transaction.
- Third-Party Integrations: When you connect Interro AI to third-party applications (e.g., productivity tools, databases), data is shared with those third parties under their own privacy policies.
- Legal & Safety Requirements: We disclose personal data to authorities as required by law, in response to legal processes, or to protect the health, safety, and rights of our users, employees, and the public.
- With Your Consent: We disclose personal data when you give us explicit permission or instruct us to do so.
Your Rights and Choices
Depending on your jurisdiction, you may have the following rights regarding your personal data. To exercise any right, contact us at security@interroai.com. We may verify your identity before acting on requests.
| Right | Description | How to Exercise |
|---|---|---|
| Right to Know | Know what personal data we process, sources, purposes, and third-party recipients. | security@interroai.com |
| Access & Portability | Receive a copy of your personal data; port it where technically feasible. | security@interroai.com |
| Deletion | Request deletion of your personal data, subject to legal exceptions. Deleted conversations are removed within 30 days. | Account settings or email |
| Correction | Request correction of inaccurate personal data we hold. | security@interroai.com |
| Objection | Object to processing based on legitimate interests, including direct marketing. | Account settings or email |
| Restriction | Restrict our processing in certain circumstances. | security@interroai.com |
| Withdraw Consent | Withdraw consent where processing is consent-based, without affecting prior lawful processing. | Account Privacy Settings |
Interro AI will not discriminate against you for exercising any privacy rights available to you under applicable law.
International Data Transfers
Your personal data may be transferred to and processed in the United States or other countries outside your country of residence. When transferring data outside jurisdictions with strict data protection requirements (such as the EEA or UK), we rely on:
- Adequacy Decisions: Transfers to countries recognized by applicable authorities as providing adequate data protection.
- Standard Contractual Clauses (SCCs): European Commission-approved contractual protections for transfers to countries without an adequacy decision.
Data Retention and Security
6.1 Retention Periods
We retain personal data for as long as necessary to fulfill the purposes described in this Policy or as required by law.
6.2 Security Controls
Interro AI implements industry-standard technical and organizational security measures to protect personal data from loss, misuse, unauthorized access, disclosure, alteration, or destruction.
- Encryption of data in transit and at rest
- Annual security and privacy training for all personnel
- Regular security assessments and penetration testing
- Comprehensive system inventory management
- Least-privilege employee access controls
- Secure device management policies
To report a security concern or data incident, contact our security team at security@interroai.com.
Children's Privacy
Our Services are not directed to children under the age of 18. We do not knowingly collect, use, disclose, sell, or share personal data from children under 18. If you believe a child has provided us personal data, contact us immediately at security@interroai.com and we will investigate and, where appropriate, delete the data.
Changes to This Privacy Policy
We may update this Privacy Policy periodically. We will notify you of material changes by updating the Effective Date above and, where appropriate, through in-product notifications or email. Continued use of our Services following notice of changes constitutes acceptance of the updated Policy.
Contact Information
For questions, complaints, or requests regarding this Privacy Policy or your personal data:
You may also have the right to lodge a complaint with the data protection supervisory authority in your jurisdiction.
Legal Bases for Processing (EEA/UK Users)
The table below summarizes our legal bases for processing personal data under GDPR and equivalent frameworks:
| Purpose | Data Types | Legal Basis |
|---|---|---|
| Providing and maintaining our Services | Contact, Inputs/Outputs, Technical | Contract |
| Account creation and administration | Contact, Payment, Feedback | Contract |
| Payment processing | Contact, Payment | Contract |
| Fraud prevention and security | Contact, Inputs/Outputs, Technical | Legitimate Interests / Legal Obligation |
| AI model improvement (opt-in) | Feedback, Inputs/Outputs | Consent / Legitimate Interests |
| Communications and marketing | Contact, Technical | Legitimate Interests / Consent |
| Dispute resolution | Contact, Inputs/Outputs, Feedback | Legitimate Interests / Legal Obligation |
| Debugging and error repair | Contact, Feedback, Technical | Legitimate Interests |
| Enforcing Terms of Service | Contact, Inputs/Outputs, Technical | Contract / Legitimate Interests |