Privacy Policy

1. Scope of This Policy

This Privacy Policy applies to all users of the Services and covers the following categories of information:

• Personal Data: Information that identifies or can reasonably be linked to an individual.
• Non-Personal Data: Aggregated or de-identified data that does not identify an individual.
• Protected Health Information ("PHI"): Information regulated under the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), where applicable.

Where PHI is processed, this Policy is intended to operate in conjunction with any applicable Business Associate Agreement ("BAA").

2. Information We Collect

A. Information You Provide Directly

We may collect information that you voluntarily provide, including:

• Account registration information (such as name, email address, organization, and billing details);
• Inputs submitted into the Services, including text, files, or other content ("Input");
• Communications with us, including support requests, emails, and feedback.

B. Information Collected Automatically

When you access or use the Services, we may automatically collect limited technical and usage information, such as:

• Service activity logs and basic usage data;
• Device and browser information;
• Cookies or similar technologies used on our websites.

C. Protected Health Information (PHI)

If you are a covered entity or business associate under HIPAA and submit PHI into the Services, such information will be handled in accordance with HIPAA, applicable regulations, and any executed BAA.

3. How We Use Information

We use collected information for the following purposes:

A. Providing and Operating the Services

• Delivering, maintaining, and supporting the Services;
• Processing transactions and managing user accounts.

B. Client Support and Communications

• Responding to inquiries, support requests, and feedback;
• Sending administrative communications, including updates, security alerts, and service notices.

C. Compliance, Safety, and Security

• Preventing fraud, abuse, unauthorized access, and misuse of the Services;
• Enforcing our Terms and Conditions and other policies;
• Complying with applicable legal, regulatory, and contractual obligations, including HIPAA where applicable.

D. Service Improvement

• Analyzing trends and usage patterns using aggregated or de-identified data;
• Improving functionality, performance, and user experience.

We do not use client Input, Output, Personal Data, or PHI to train artificial intelligence or machine learning models.

4. Content and AI-Generated Output

You may provide Input to the Services and receive AI-generated output ("Output"). Input and Output together are referred to as "Content."

• You retain ownership of your Input and Output.
• Intraverbal AI retains a limited license to use Content solely to provide, maintain, secure, and improve the Services.
• Due to the nature of artificial intelligence, Output may not be unique and may be similar to output provided to other users.
• Output may be inaccurate or incomplete and should not be relied upon as a sole source of truth or as a substitute for professional judgment or advice.

5. How We Share Information

We do not sell personal data or client data. We may disclose information only in the following circumstances:

A. Service Providers

We may share information with trusted third-party vendors who perform services on our behalf (such as cloud hosting, payment processing and customer support). These providers are contractually bound to protect information and use it only for authorized purposes.

B. Legal and Regulatory Requirements

We may disclose information where required to do so by law, regulation, subpoena, court order, or governmental request.

C. Protection of Rights and Safety

We may disclose information as necessary to enforce our agreements, investigate potential violations, protect the security of the Services, or safeguard the rights, property, or safety of Intraverbal AI, our users, or others.

D. Business Transfers

In the event of a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to appropriate confidentiality and security protections.

6. Data Security

We maintain administrative, technical, and physical safeguards designed to protect information from unauthorized access, use, alteration, or destruction. These safeguards include:

• Encryption of data in transit and at rest;
• Role-based access controls;
• Ongoing monitoring and security testing;
• Internal policies and employee training regarding data protection.

While we take reasonable measures to secure information, no system is completely secure. Users are responsible for maintaining the confidentiality of their account credentials.

7. Data Retention

We retain personal data only for as long as necessary to:

• Provide and support the Services;
• Comply with legal, regulatory, or contractual obligations;
• Resolve disputes and enforce agreements.

Accounts that remain suspended for more than thirty (30)days may be permanently deleted, along with associated data, unless retentions required by law. PHI and other regulated data will be retained or securely destroyed in accordance with HIPAA and applicable legal requirements.

8. Your Privacy Rights

Depending on your jurisdiction and applicable law, you may have the following rights:

• Access and Correction: Request access to or correction of your personal data;
• Deletion: Request deletion of personal data, subject to legal or contractual retention requirements;
• Restriction: Request restriction of certain processing activities;
• HIPAA Rights: Where PHI is involved, additional rights may apply, including the right to request an accounting of disclosures.

Requests to exercise these rights may be submitted using the contact information below.

9. Consent and Changes to This Policy

By using the Services, you consent to the collection, use, and disclosure of information as described in this Privacy Policy.

We may update this Policy from time to time. Material changes will be communicated through the Services, by email, or by posting an updated version on our website. Continued use of the Services after such notice constitutes acceptance of the revised Policy.

10. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Intraverbal AI, Inc.
1805 Ponce De Leon Blvd, Unit 1510
Coral Gables, Florida 33134
Email: info@intraverbal.ai

11. Compliance

Intraverbal AI complies with applicable data protection and privacy laws, including HIPAA where PHI is processed. We design our Services to support lawful, ethical, and secure use of artificial intelligence technologies, and we do not use client data to train AI models.