Privacy Policy

Last updated: February 11, 2025

Introduction

pmexa ("we", "us", or "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal information.

Information We Collect

Information You Provide

• Account information: Email address, name, password
• Payment information: Processed securely by Stripe (we don't store card details)
• Content you upload: Documents, text, URLs for analysis

Automatically Collected Information

• Usage data: Features used, credits consumed, login times
• Technical data: IP address, browser type, device information
• Cookies: Session cookies for authentication

How We Use Your Information

We use your information to:

• Provide and improve our service
• Process payments and manage subscriptions
• Send important updates (security, billing, features)
• Analyze usage to improve the product
• Prevent fraud and abuse

Data Processing with AI

When you use AI features (analysis, spec generation):

• Your content is sent to Anthropic (Claude AI) for processing
• Anthropic does not train models on your data
• We do not use your content to train AI models
• Your content is processed in real-time and not stored by Anthropic

Data Retention

• Active accounts: We retain data while your account is active
• Deleted accounts: Data deleted within 30 days of account deletion
• Backups: May persist in backups for up to 90 days
• Legal requirements: We may retain data longer if required by law

Data Sharing

We do not sell your personal information. We share data only with:

• Anthropic: For AI processing (covered by their privacy policy)
• Stripe: For payment processing
• Analytics: Anonymized usage data for product improvement
• Legal requirements: When required by law

Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and data
• Export your data
• Opt out of marketing emails

Contact support@pmexa.com to exercise these rights.

Security

We use industry-standard security measures:

• Encryption in transit (TLS/SSL)
• Encryption at rest for sensitive data
• Secure authentication (Clerk)
• Regular security audits

Children's Privacy

pmexa is not intended for users under 18. We do not knowingly collect data from children.

International Users

Your data may be processed in the US or other countries where we or our service providers operate.

Changes to This Policy

We may update this policy. Material changes will be communicated via email.

Contact Us

Questions about privacy? Email privacy@pmexa.com

---

This policy is effective as of February 11, 2025.