Privacy Policy

1. Introduction

BlacksmithAI ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our Service.

2. Information We Collect

We collect the following types of information:

• Account Information: Email address, password (encrypted), and authentication data
• Usage Data: Conversation threads, messages, and interaction history with the AI assistant
• Technical Data: IP address, browser type, device information, and usage statistics
• Preferences: Settings, preferences, and customization choices

3. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Process your requests and transactions
• Improve and personalize your experience
• Send you updates and notifications (with your consent)
• Analyze usage patterns to enhance our Service
• Detect and prevent fraud or abuse

4. Data Storage and Security

Your data is stored securely using industry-standard encryption methods. We use Supabase for authentication and database services, which provides enterprise-grade security. Passwords are hashed using bcrypt, and all data is transmitted over HTTPS.

Conversation data is stored in both Supabase (for display and search) and LangGraph (for agent state management). Both systems employ robust security measures to protect your information.

5. Data Sharing

We do not sell your personal data. We may share your information with:

• Service Providers: Third-party services that help us operate the platform (Supabase, LangGraph, hosting providers)
• Legal Requirements: When required by law or to protect our rights and users
• Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data in a machine-readable format
• Opt-out of marketing communications
• Object to processing of your data

You can exercise these rights through your account settings or by contacting us at privacy@blacksmithai.com

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

8. Cookies and Tracking

We use essential cookies to maintain your session and provide authentication. We do not use third-party tracking cookies for advertising purposes. You can control cookie settings through your browser preferences.

9. Children's Privacy

Our Service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and that your data receives adequate protection.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by email or through the Service. Your continued use of the Service after such changes constitutes your acceptance of the new policy.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

• Email: privacy@kahanlabs.com
• Support: support@kahanlabs.com