Privacy Policy

Introduction

Welcome to dataface.ai ("dataface.ai," "we," "us," or "our"). We are committed to protecting your privacy and ensuring the security of your data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our real-time data analytics platform and services (the "Services").

By accessing or using our Services, you agree to the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

1. Information We Collect

1.1 Information You Provide to Us

Account Information:

Name, email address, company name
Password (encrypted and hashed)
Billing and payment information
Contact preferences and communication settings

1.2 Data You Connect to Our Platform

Data Source Credentials:

Database connection strings (encrypted)
API keys and access tokens (encrypted)
SSH keys and certificates (encrypted)

Important:

dataface.ai operates on a minimal data movement principle. We do not store or copy your actual business data unless you explicitly configure our platform to do so for caching or analytics purposes. We primarily process metadata and queries.

2. How We Use Your Information

To provide, maintain, and improve our Services
To process your transactions and manage your account
To communicate with you about updates, security alerts, and support messages
To monitor and analyze trends, usage, and activities in connection with our Services

3. Data Security and Protection

3.1 Security Measures

We implement industry-standard security measures to protect your information:

Encryption:

All data in transit encrypted using TLS 1.3 or higher
All sensitive data at rest encrypted using AES-256
Database credentials encrypted with separate encryption keys
End-to-end encryption for sensitive operations

Access Controls:

Role-based access control (RBAC) for all users
Multi-factor authentication (MFA) support
IP whitelisting and network restrictions
Principle of least privilege access

Infrastructure Security:

Secure cloud hosting with enterprise-grade providers
Regular security audits and penetration testing
24/7 security monitoring and threat detection
DDoS protection and intrusion prevention

4. Data Retention and Deletion

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. Upon account deletion, all associated data, including cached queries and connection strings, are permanently destroyed within 30 days.

6. Your Data Rights

You have the following rights regarding your personal information:

Access and Portability

Access your personal information and request a copy in a machine-readable format.

Correction and Update

Correct inaccurate personal information and update your account details.

Deletion and Erasure

Request deletion of your personal information and exercise your "right to be forgotten."

Restriction and Objection

Restrict processing of your data and opt-out of marketing communications.

To exercise your rights:

• Email us at privacy@dataface.ai
• Use the account settings in your dashboard
• Contact our Data Protection Officer

We will respond to your request within 30 days.

7. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. We ensure appropriate safeguards are in place for such transfers.

8. Compliance with Data Protection Laws

We comply with applicable data protection laws, including GDPR and CCPA. If you are a resident of the European Economic Area (EEA) or California, you have specific rights regarding your personal information as detailed in Section 6.

9. Contact Us

Data Protection Officer

Email: privacy@dataface.ai
DPO Email: dpo@dataface.ai

General Inquiries

Support: support@dataface.ai
Security: security@dataface.ai

Note: This is a summary of our Privacy Policy. For the complete policy, please see our full Privacy Policy document.