This Privacy Policy describes how The Company Company Inc. ("Company," "we," "us," or "our"), collects, uses, and shares information when you use our platform and services at companycompany.ai (the "Services"). By using the Services, you agree to the collection and use of information as described in this policy.
Information We Collect
Information You Provide
- Account Information: Name, email address, password, and organization details when you create an account
- Billing Information: Payment method details and billing address, processed securely through our third-party payment provider (Autumn). We do not store full payment card numbers on our servers.
- Customer Data: Any data, content, or information you submit through the Services in connection with your use
- Communications: Information you provide when you contact us for support, submit feedback, or otherwise communicate with us
Information Collected Automatically
When you use the Services, we automatically collect certain information, including:
- Log Data: IP address, browser type, operating system, referring URLs, pages visited, and timestamps
- Device Information: Device type, unique device identifiers, and operating system version
- Usage Data: Features used, actions taken, frequency and duration of activities, and performance data
Cookies and Tracking Technologies
We use the following categories of cookies and similar technologies:
- Strictly Necessary: Required for the Services to function, including authentication and security cookies. These cannot be disabled.
- Analytics: Used to understand how users interact with the Services. We use the following analytics services:
- PostHog: Product analytics and session recording for understanding user behavior and improving the Services
- Vercel Analytics: Web performance and traffic analytics
We do not use advertising or marketing cookies.
You can manage analytics cookies through your browser settings or by contacting us at legal@companycompany.ai. Disabling analytics cookies will not affect the functionality of the Services.
How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Services
- Process transactions and manage your subscription
- Send transactional communications, including service updates, security alerts, and support messages
- Respond to your requests, comments, and questions
- Monitor and analyze usage patterns and trends to improve the Services
- Detect, prevent, and address fraud, abuse, and security issues
- Comply with legal obligations and enforce our Terms of Service
- Develop new features and functionality
We do not use your Customer Data to train, fine-tune, or improve general-purpose AI or machine learning models, or for purposes unrelated to providing the Services to you.
AI and Automated Processing
Our Services include AI-powered features that process data to provide autonomous agent capabilities. In connection with these features:
- AI Processing: Customer Data may be processed by AI models to generate outputs, make recommendations, and execute tasks as configured by the Customer. This processing is performed solely to provide the Services.
- Third-Party AI Providers: We use third-party AI model providers (such as Anthropic) to power AI features. Customer Data sent to these providers is subject to our data processing agreements with them and is not used by these providers to train their models.
- AI Logs: We may retain logs of AI inputs and outputs for a limited period to provide the Services, debug issues, and ensure quality. These logs are treated as Customer Data and subject to the same protections.
- Automated Decision-Making: Our AI features may make automated decisions or take automated actions based on Customer configurations. Customers are responsible for implementing appropriate human oversight as required by their use case and applicable law.
- No Model Training: We do not use Customer Data to train, fine-tune, or improve general-purpose AI or machine learning models.
How We Share Your Information
We do not sell your personal information. We may share information in the following circumstances:
- Service Providers: With third-party vendors who perform services on our behalf (hosting, payment processing, analytics, AI model providers, email delivery), subject to confidentiality and data processing obligations
- Legal Compliance: When required by law, regulation, legal process, or governmental request
- Safety and Rights: To protect the rights, property, or safety of the Company, our users, or others
- Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, in which case your information may be transferred as part of the transaction
- With Your Consent: When you have given us explicit consent to share your information
Our Role as a Service Provider
When we process Customer Data on behalf of our business customers, we act as a "service provider" as defined by the CCPA/CPRA. In this capacity, we:
- Process Customer Data only for the business purposes specified in our agreement with the Customer
- Do not sell or share Customer Data
- Do not retain, use, or disclose Customer Data for any purpose other than performing the Services
- Do not combine Customer Data with personal information received from other sources, except as permitted by the CCPA
- Certify that we understand and will comply with these restrictions
Data Security
We implement commercially reasonable technical and organizational measures to protect your information, including:
- Encryption of data in transit (TLS) and at rest
- Access controls and authentication mechanisms
- Regular security reviews
- Incident response procedures
However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Data Retention
We retain personal information as follows:
- Account Information: For the duration of your account plus 30 days after account deletion
- Billing Records: For 7 years after the transaction, as required by tax and financial regulations
- Log and Usage Data: For 12 months from collection
- AI Logs: For 90 days from generation, unless longer retention is required to provide the Services or resolve issues
- Support Communications: For 3 years from resolution
- Aggregated/Anonymized Data: Indefinitely, as it cannot be used to identify you
When data is no longer needed, we securely delete or anonymize it.
Your Rights and Choices
All Users
You may:
- Access, update, or correct your account information through your account settings
- Delete your account by contacting us or through your account settings
- Opt out of non-essential marketing communications by following the unsubscribe instructions in those messages
California Residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
- Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business or commercial purpose for collecting the information, and the categories of third parties with whom we share the information.
- Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.
- Right to Correct: You have the right to request that we correct inaccurate personal information.
- Right to Opt Out of Sale/Sharing: We do not sell or share (as defined by the CCPA/CPRA) your personal information for cross-context behavioral advertising.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise any of these rights, contact us at legal@companycompany.ai. We will verify your identity before processing your request and respond within 45 days as required by law.
Categories of Personal Information Collected (as defined by the CCPA):
| Category | Examples | Collected | Sources | Business Purpose |
|---|
| Identifiers | Name, email, IP address | Yes | Directly from you; automatically from your device | Account creation, authentication, communications |
| Commercial information | Subscription records, billing history | Yes | Directly from you; from payment processors | Billing, subscription management |
| Internet activity | Browsing history, interactions with Services | Yes | Automatically from your device and our Services | Service improvement, security, analytics |
| Geolocation data | Approximate location from IP address | Yes | Automatically from your device | Service delivery, security |
| Professional information | Company name, job title | Yes | Directly from you | Account setup, personalization |
| Sensitive personal information | Account login credentials | Yes | Directly from you | Authentication, account security |
Do Not Track Signals
Our Services do not currently respond to "Do Not Track" browser signals. You can manage tracking preferences as described in the Cookies and Tracking Technologies section above.
International Data Transfers
Our Services are hosted in the United States. If you access the Services from outside the United States, your information will be transferred to and processed in the United States. By using the Services, you consent to such transfer and processing.
Children's Privacy
The Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.
Third-Party Links and Services
The Services may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy on our website with a revised "Last updated" date
- Sending notice to the email address associated with your account, where practicable
Your continued use of the Services after the effective date of any changes constitutes acceptance of the updated policy.
Contact Us
If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at: