Privacy Policy

1. What we collect

• Account data — email, name, company, role, authentication identifiers.
• Engagement content — intakes, uploaded documents, generated briefs and reports.
• Usage data — server logs (IP, user-agent, timestamps) for security and abuse prevention.
• Cookies & local storage — only strictly necessary cookies by default; analytics and marketing are opt-in.

2. How we use it

• To operate, secure, and improve the Platform.
• To produce the intelligence Deliverables you request.
• To communicate about your account and changes to terms.
• To comply with legal obligations.

3. What we do NOT do

• We do not sell personal information.
• We do not use your engagement content to train public or third-party AI models.
• We do not share your data with other users; team-shared engagements are visible only to members of that team.

4. Sharing

We share data only with: (a) infrastructure subprocessors strictly required to run the Platform (database, storage, AI gateway, search providers), under written confidentiality; (b) authorities when legally compelled; (c) acquirers in the event of a merger or acquisition (with continued protection).

5. Cookies

Strictly necessary cookies (authentication, session, security) load by default — they are required for the Platform to function. Analytics and marketing cookies do not load unless you explicitly opt in via the consent banner. You can change your choices at any time.

6. Your rights (GDPR / CCPA / similar)

• Access, correct, or delete your personal data.
• Export a copy of your data.
• Withdraw consent for non-essential processing at any time.
• Object to processing or request restriction.
• Lodge a complaint with your local supervisory authority.

Requests: privacy@blackkeyintelligence.com.

7. Retention

Account data is retained while your account is active and for up to 24 months thereafter unless a longer period is required by law. Engagement content is retained until you delete it or close the engagement; backups roll off within 30 days of deletion.

8. Security

Row-Level Security on the database, TLS in transit, encryption at rest, scoped access keys, and least-privilege role design. Reports of vulnerabilities:security@blackkeyintelligence.com.

9. International transfers

Data may be processed in the United States and other jurisdictions where our subprocessors operate, with appropriate safeguards (Standard Contractual Clauses or equivalent).

10. Children

The Platform is not directed to anyone under 18.