Privacy Policy

Attension, Inc. ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI workforce orchestration platform ("Service").

This policy applies to all users of our Service, including visitors to our website, registered users, and API consumers. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

We collect several types of information from and about users of our Service:

Personal Information

• Name, email address, and contact information
• Account credentials and authentication data
• Billing information and payment details (processed by our payment providers)
• Organization name, role, and team membership
• Profile information, including avatar and preferences

Usage Data

• IP address, browser type, device information, and operating system
• Pages visited, features used, and time spent on the Service
• Agent configurations, mission data, and task interactions
• Search queries and interaction patterns
• Error logs and performance data

Content Data

• Documents, files, and media uploaded to the Service
• Chat messages and conversation history
• Agent prompts, instructions, and generated outputs
• Knowledge base entries and workspace data

We use collected information for the following purposes:

• To provide, maintain, and improve the Service
• To create and manage your account
• To process transactions and send billing notifications
• To send administrative information, updates, and security alerts
• To respond to your comments, questions, and support requests
• To personalize your experience and deliver relevant content
• To monitor and analyze usage trends and improve our technology
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations and enforce our Terms of Service

AI Model Improvement: We may use anonymized, aggregated usage data to improve our AI models and service quality. We do not use your personal content or proprietary data for model training without your explicit consent. Enterprise customers may opt out of all data usage for model improvement.

We may share your information in the following circumstances:

• Service Providers: With third-party vendors who assist us in providing the Service, including cloud hosting, payment processing, analytics, and customer support.
• AI Model Providers: When you use AI Agents, certain prompts and data may be transmitted to underlying AI model providers (e.g., OpenAI, Anthropic, Google) as necessary to generate responses.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Protection of Rights: To protect the rights, property, or safety of Attension, our users, or others.
• With Your Consent: When you explicitly authorize us to share your information.

We do not sell your personal information to third parties. We do not share your personal information with third parties for their marketing purposes.

We use cookies and similar tracking technologies to collect and track information about your use of the Service:

• Essential Cookies: Required for the Service to function properly, including authentication and session management.
• Analytics Cookies: Help us understand how users interact with the Service so we can improve it. We use privacy-focused analytics tools.
• Preference Cookies: Store your settings and preferences, such as theme, language, and display options.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of the Service.

We do not use advertising cookies or tracking pixels. We do not participate in cross-site tracking or retargeting programs.

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256)
• Regular security audits and penetration testing
• Role-based access controls and multi-factor authentication
• Automated monitoring and anomaly detection
• SOC 2 Type II compliance (in progress)
• Regular employee security training

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee the absolute security of your data.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account Data: Retained for the duration of your account plus 30 days after deletion.
• Usage Data: Retained for up to 24 months for analytics and service improvement.
• Billing Records: Retained for 7 years to comply with financial regulations.
• Support Tickets: Retained for 3 years after resolution.
• Agent Outputs: Retained according to your workspace settings. Default is 90 days.

You may request deletion of your data at any time. See the "Your Rights" section below.

Depending on your location, you may have the following rights regarding your personal information:

GDPR Rights (EEA/UK Users)

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten").
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

CCPA Rights (California Residents)

• Right to Know: Request information about the categories and specific pieces of personal information we have collected.
• Right to Delete: Request deletion of your personal information.
• Right to Opt-Out: Opt out of the sale of your personal information. Note: We do not sell personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise any of these rights, please contact us at privacy@attension.ai. We will respond to your request within 30 days (or 45 days for CCPA requests, with extension if needed).

The Service is not intended for children under the age of 16 (or 13 in jurisdictions where permitted). We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under the applicable age, we will take steps to delete such information promptly. If you believe we have collected information from a child, please contact us at privacy@attension.ai.

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our servers and central database operate.

For transfers from the European Economic Area (EEA) or United Kingdom to countries not deemed adequate by the European Commission, we use Standard Contractual Clauses (SCCs) approved by the European Commission as the legal mechanism for such transfers.

We also comply with the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework as set forth by the U.S. Department of Commerce.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

For significant changes, we will provide additional notice through an in-app notification or email to the address associated with your account. We encourage you to review this Privacy Policy periodically.

Your continued use of the Service after changes to this Privacy Policy constitutes your acceptance of the revised policy.

If you have any questions about this Privacy Policy, please contact us:

• Email: privacy@attension.ai
• Address: Attension, Inc., 1234 Innovation Drive, Suite 500, Wilmington, DE 19801
• Support: support@attension.ai

We have appointed a Data Protection Officer (DPO) to oversee compliance with data protection laws. You may contact our DPO for any questions or concerns regarding our processing of your personal data:

• Email: dpo@attension.ai
• Address: Data Protection Officer, Attension, Inc., 1234 Innovation Drive, Suite 500, Wilmington, DE 19801

If you are in the EEA and believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local supervisory authority.