Privacy Policy
Last Updated: March 2026
Assisters, LLC("Assisters," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.
1. Information We Collect
Personal Information
When you create an account or use our services, we may collect:
- Name and email address
- Account credentials
- Payment information (processed securely through third-party providers)
- Profile information you choose to provide
Usage Information
We automatically collect certain information when you use our platform:
- Device and browser information
- IP address and location data
- Usage patterns and interactions with our services
- Chat logs and conversation history with Assisters
Content You Provide
When you create Assisters, we collect:
- Knowledge base documents and files you upload
- Configuration settings and customizations
- Assister names, descriptions, and metadata
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process transactions and send related information
- Train and operate Assisters based on your knowledge bases
- Send technical notices, updates, and support messages
- Respond to your comments, questions, and requests
- Monitor and analyze usage trends and preferences
- Detect, investigate, and prevent fraudulent transactions and abuse
- Personalize and improve your experience
- Comply with legal obligations
3. Information Sharing and Disclosure
We may share your information in the following circumstances:
Service Providers (Data Processors)
We share information with third-party vendors who process data on our behalf under Data Processing Agreements incorporating EU Standard Contractual Clauses (2021/914) where applicable. These processors include:
- OpenAI, Inc. (USA) — AI language model inference and moderation; EU SCCs Module 2 + Data Privacy Framework certified
- Groq, Inc. (USA) — AI language model inference; EU SCCs Module 2; zero data retention
- Hugging Face, Inc. (USA) — Semantic search and text embeddings; EU SCCs Module 2; zero data retention
- Stripe, Inc. (USA) — Payment processing and creator payouts; EU SCCs embedded in Stripe DPA + Data Privacy Framework certified
- Cloudflare, Inc. (USA) — CDN, DDoS protection, and Web Application Firewall; EU SCCs Module 2 + Data Privacy Framework certified
- Supabase (self-hosted on our own VPS) — Database, authentication, and file storage; no third-party data sharing
- Sentry — Error monitoring and performance tracking (anonymised stack traces only)
A full vendor list including roles and transfer mechanisms is maintained internally per GDPR Art.30.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
Legal Requirements
We may disclose information if required by law or in response to valid legal processes, such as subpoenas or court orders.
Public Assisters
If you publish an Assister to our marketplace, information such as your display name, Assister description, and usage statistics may be publicly visible.
4. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit and at rest
- Regular security assessments and audits
- Access controls and authentication requirements
- Secure data storage with reputable cloud providers
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
5. Your Rights and Choices
Depending on your location, you may have the following rights:
- Access: Request access to your personal information
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your personal information
- Portability: Request a copy of your data in a portable format
- Opt-out: Opt out of marketing communications
- Withdraw Consent: Withdraw consent where processing is based on consent
To exercise these rights, please contact us at [email protected].
If you want a downloadable copy of your data, you can request an export on our Data Request page.
6. Regional Privacy Disclosures
EU/UK
Our lawful bases include contract performance, legitimate interests, consent, and legal obligations. You may lodge a complaint with your local data protection authority.
United States
You can exercise applicable state privacy rights and submit a request on our Do Not Sell page. We will honor opt-out requests where required by law.
India
You may withdraw consent and submit grievances by contacting [email protected]. We will respond in line with applicable timelines.
Other Regions
We comply with LGPD, PDPA, and PIPEDA requirements where applicable, including purpose limitation, access, and correction rights.
7. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect and track information about your activity on our platform. Cookies are small data files stored on your device.
We use the following types of cookies:
- Essential Cookies: Required for the platform to function properly
- Analytics Cookies: Help us understand how users interact with our services
- Preference Cookies: Remember your settings and preferences
You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our services.
8. Data Retention
We retain personal information only as long as needed for the purposes described in this policy and as required by law. Typical retention periods include:
- Account data: active account plus up to 12 months after deletion request
- Chat content: 365 days (1 year) unless deleted earlier
- Knowledge uploads: until removed by the creator
- Usage analytics: up to 13 months
- Support records: up to 24 months
- Backups: up to 30 days
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including the United States. When we transfer personal data of EU/EEA or UK residents to third countries, we implement the following safeguards:
- EU Standard Contractual Clauses (SCCs): Commission Implementing Decision 2021/914, Module 2 (Controller-to-Processor) with all US-based processors
- UK International Data Transfer Agreement (IDTA): UK ICO-approved mechanism for transfers of UK personal data
- EU-US Data Privacy Framework (DPF): For processors certified under the DPF (Stripe, Cloudflare, OpenAI)
- Transfer Impact Assessments (TIAs): Conducted for all processors receiving EU/UK personal data
Our Transfer Impact Assessments are documented and available to supervisory authorities upon request. For more information about international transfers, contact [email protected].
9a. EU & UK Representative (GDPR Art. 27)
As a controller established outside the European Union and United Kingdom, Assisters LLC has designated EU and UK representatives pursuant to GDPR Article 27 and UK GDPR Article 27. EU and UK data subjects and supervisory authorities may direct GDPR/UK GDPR inquiries to:
EU Representative (GDPR Art. 27)
Appointment pending — EU Representative service engagement in progress. Contact [email protected] for GDPR matters in the interim.
UK Representative (UK GDPR Art. 27)
Appointment pending — UK Representative service engagement in progress. Contact [email protected] for UK GDPR matters in the interim.
The DPO contact for all data protection matters is [email protected]. For general privacy inquiries: [email protected].
10. Children's Privacy
Our services are not directed to children under the age of 13 (or applicable age in your jurisdiction). We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take steps to delete that information promptly.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of our services after any modifications indicates your acceptance of the updated Privacy Policy.
12. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us at:
Assisters, LLC
1111B S Governors Ave Ste 88696
Dover, DE 19904
United States
Email: [email protected]