AINOS (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our business management platform (the “Service”).
By using the Service, you consent to the data practices described in this policy. If you do not agree, please discontinue use of the Service.
2. Information We Collect
We collect the following categories of information:
Account Information: Name, email address, password (hashed), and role.
Company Information: Company name, type, address, country, GST number, phone, and email.
Verification Documents: Business registration documents, PAN cards, certificates of incorporation, and other KYC documents uploaded during onboarding.
Business Data: Invoices, customer records, employee data, inventory, blog posts, and other content you create or upload.
Usage Data: Feature interactions, credit consumption, and platform activity.
Technical Data: IP address, browser type, device information, and cookies.
3. How We Use Your Information
We use your information for the following purposes:
To provide, operate, and maintain the Service.
To verify your business identity during onboarding.
To process transactions and manage credit balances.
To send account-related communications (approvals, rejections, security alerts).
To improve and personalize the platform experience.
To detect, prevent, and address fraud and security issues.
To comply with legal and regulatory obligations.
4. Data Isolation & Document Privacy
Data privacy is a core architectural principle of AINOS:
Tenant Isolation: Each company's data is logically isolated. Your data is never visible to other companies on the platform.
Document Confidentiality: Uploaded legal and verification documents are stored securely via encrypted cloud storage (Cloudinary). These documents are accessible only to your company's authorized users and designated platform administrators for verification purposes.
No Data Selling: We never sell, rent, or trade your business data or personal information to third parties.
AI Processing: Data sent to AI models (for blog generation, captions, etc.) is processed transiently and not retained by AI providers for training.
5. Data Storage & Security
Your data is stored on secure cloud infrastructure:
Database: PostgreSQL hosted on Aiven Cloud with encryption at rest and in transit.
Documents: Encrypted storage on Cloudinary with access-controlled delivery.
Authentication: Passwords are hashed using industry-standard bcrypt. OAuth tokens are stored securely.
Access Control: Role-based access ensures users only see data appropriate to their role within their company.
We implement industry-standard security measures including HTTPS, input sanitization, and SQL injection prevention.
6. Data Sharing & Third Parties
We do not sell or share your personal information with third parties except in the following limited circumstances:
Service Providers: Cloud hosting (Render, Aiven), document storage (Cloudinary), email delivery (Brevo), and AI processing (Google Gemini, Groq) — each bound by their own privacy commitments.
Legal Requirements: If required by law, regulation, or valid legal process.
Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice.
With Your Consent: When you explicitly authorize sharing.
7. Your Rights
You have the following rights regarding your data:
Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete data.
Deletion: Request deletion of your account and associated data.
Portability: Request export of your business data in a standard format.
Objection: Object to certain processing of your data.
To exercise any of these rights, please contact us at info.ainosio@gmail.com.
8. Data Retention
We retain your data for as long as your account is active. Upon account termination, we will delete or anonymize your personal data within 30 days, except where retention is required for legal, regulatory, or legitimate business purposes (e.g., financial transaction records).
9. Cookies
We use cookies and similar technologies for session management, authentication, and platform functionality. These are essential for the Service to function and cannot be disabled. We do not use tracking or advertising cookies.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or platform notice. The “Last updated” date at the top reflects the most recent revision.
11. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us: