Privacy Policy

1. Introduction

Axyl Digital Infrastructure LLC ("we," "us," "our," or "Coalesq") operates the Coalesq AI platform accessible at coalesqai.io (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.

2. Information We Collect

2.1 Account Information

When you sign in via Google OAuth, we collect:

• Name
• Email address
• Profile image (if available)

2.2 Authentication and Session Data

We use JSON Web Tokens (JWT) with a 7-day session duration to maintain your authenticated state. These tokens are stored in secure, HTTP-only cookies.

2.3 Usage Data

When you use the Service, we collect and store:

• Prompts you submit to AI models
• AI model responses and outputs
• Conversation history for multi-turn conversations
• Candidate responses generated by different models
• Token counts (input and output)
• Cost data for each model invocation
• Workflow configurations and metadata
• Run metadata (timestamps, status, results)

2.4 Device and Error Logs

We collect diagnostic information to improve service reliability:

• Page URLs where errors occur
• Browser user agent
• Error messages and stack traces
• Server-side application logs

We do not currently use third-party analytics services, but this may change in the future (see Section 11).

2.5 Payment and Billing Information

We use Stripe to process payments. We store:

• Stripe Customer IDs
• Stripe Subscription IDs
• Stripe Payment Intent IDs
• Wallet balance and transaction history
• Credit top-up and usage records

We do not store credit card numbers, CVV codes, or other sensitive payment information. Stripe handles all payment card data in compliance with PCI-DSS standards.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process your prompts through multiple AI model providers
• Evaluate and rank AI model responses
• Process payments and manage your wallet balance
• Calculate usage costs and maintain billing records
• Provide customer support and respond to your inquiries
• Detect, prevent, and address fraud or technical issues
• Analyze usage patterns through internal analytics to improve the Service
• Send you service-related notifications (e.g., low balance alerts, subscription updates)

4. Information Sharing and Disclosure

4.1 AI Model Providers

To provide the Service, we send your prompts and receive outputs from the following AI model providers:

• OpenAI (GPT models, o-series models)
• Anthropic (Claude models)
• Google (Gemini models)
• xAI (Grok models)

Each provider operates under its own privacy policy and terms of service. Where provider controls are available, we configure services to opt out of training on customer data. However, you should review each provider's privacy practices independently.

4.2 Payment Processing

We use Stripe to process payments. Stripe receives payment information necessary to complete transactions, including billing details and payment method information. Stripe's use of your personal information is governed by its privacy policy.

4.3 Cloud Hosting and Infrastructure

Our Service is hosted on cloud infrastructure providers. These providers have access to data stored on their servers but are contractually obligated to maintain confidentiality and security.

4.4 Legal Compliance

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or subpoena).

5. Cookies and Tracking Technologies

We use essential cookies to:

• Maintain your authenticated session (HTTP-only, secure cookies)
• Store authentication tokens (7-day expiration)

We do not use third-party tracking cookies or advertising cookies at this time.

6. Data Security

We implement reasonable technical and organizational measures to protect your information, including:

• TLS encryption for data in transit
• Access controls and authentication requirements
• Secure storage of authentication tokens
• Regular security reviews of our infrastructure

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

7. Data Retention and Deletion

We retain your information for as long as necessary to provide the Service and comply with our legal obligations. Specifically:

• Account information is retained while your account is active
• Usage data (prompts, outputs, runs) is retained to provide historical access and billing records
• Billing and transaction records are retained for accounting and tax compliance purposes
• Error logs are retained for debugging and service improvement

You may request deletion of your account and associated data by contacting us at Feedback@Roundtableai.io. Please note that some data may be retained in backups for a limited period and may persist until backup rotation cycles complete.

8. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a structured, machine-readable format
• Objection: Object to certain processing of your information

To exercise these rights, please contact us at Feedback@Roundtableai.io. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

California Residents: Under the California Consumer Privacy Act (CCPA), you have the right to know what personal information is collected, disclosed, or sold, and the right to request deletion. We do not sell personal information.

EEA/UK Residents: Under the General Data Protection Regulation (GDPR), you have additional rights including the right to lodge a complaint with a supervisory authority.

9. Children's Privacy

The Service is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us at Feedback@Roundtableai.io, and we will take steps to delete such information.

10. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where we, our service providers, or AI model providers operate. These countries may have data protection laws that differ from those in your country of residence.

We rely on standard contractual clauses, adequacy decisions, and other lawful mechanisms to transfer data internationally in compliance with applicable law.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Effective Date" at the top of this page. We encourage you to review this Privacy Policy periodically.

If we make material changes to how we process your personal information, we will notify you by email or through a prominent notice on the Service prior to the changes becoming effective.

Note: When we enable Sentry or other error tracking/analytics services in the future, we will update this Privacy Policy to reflect those changes.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: