Privacy Policy
DRAFT — operator + legal review required before publishing. Grounded in the actual data model; not legal advice. Fill «BLANKS».
Last updated: «DATE»
Symbiotic AI LLC ("we", "us"), Orlando, Florida, USA, respects your privacy. Our product is local-first by design, and we collect as little as possible.
What we collect
- Account data: the email address you sign up with, and your subscription/entitlement state (which plugins/tier are active, renewal status).
- A payment-processor reference: an identifier linking your account to your customer record at Paddle (our payment processor). We do not store your card or payment details — those are held by Paddle.
- Basic operational logs: standard server logs (e.g., timestamps, error events) for security and reliability.
What we do NOT collect
- Your AI-provider API keys — you configure these locally in Cilia; they are never transmitted to us.
- Your AI prompts, agent transcripts, or outputs — these stay on your own devices/providers. Cilia is local-first; license validation happens offline on your device and does not require us to see your activity.
- Usage/metering data — we do not meter AI usage; there is nothing per-token to collect.
Payments
Payments are processed by Paddle.com Market Limited, our Merchant of Record. Paddle collects and processes payment information under Paddle's Privacy Policy (https://www.paddle.com/legal/privacy). We receive from Paddle only what we need to provision your subscription (e.g., your email, plan, and a customer reference).
How we use data
Solely to: create and manage your account, provision and renew your subscription licenses, provide support, and keep the service secure. We do not sell your personal data.
Sharing
We share data only with: Paddle (payments), and infrastructure/hosting providers strictly to operate the service. «List subprocessors when finalized.»
Retention
We retain account and subscription records for as long as your account is active and as required for legal, tax, and accounting purposes, then delete or anonymize them.
Your rights
Depending on your jurisdiction (e.g., GDPR/CCPA), you may request access, correction, deletion, or export of your personal data. Contact admin@symbiotic.ai. «Confirm rights/process with counsel.»
International
We operate from the United States; your data may be processed in the US and by our processors' regions.
Changes
We may update this policy; material changes will be posted here with a revised date.
Contact
Symbiotic AI LLC, Orlando, FL · admin@symbiotic.ai