Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and profile information. If you sign in via Google OAuth, we receive your name, email, and profile picture from Google.

Workspace Data

We store the content you create within your workspace, including tickets, documents, comments, and meeting notes. This data belongs to your workspace and is accessible only to workspace members.

Integration Data

If you connect third-party services (Slack, GitLab, Google Calendar, Jira, Linear, Confluence, Notion, Salesforce, etc.), we access and index relevant data from those services to power features like search and Organizational Intelligence (OI). We only access data you explicitly authorize.

Usage Data

We automatically collect technical information such as browser type, device information, and pages visited to improve our platform.

2. How We Use Your Information

• Provide, maintain, and improve the Premise platform
• Power Organizational Intelligence (OI) features - our AI analyzes your workspace data to provide insights, answer questions, and generate recommendations
• Process meeting recordings and transcriptions when you use Meeting Intelligence
• Send notifications and updates related to your workspace activity
• Respond to support requests and communicate with you
• Detect, prevent, and address technical issues or abuse

3. AI & Data Processing

Premise uses AI services (OpenAI, Google Gemini) to power OI features. When you interact with OI or use AI-powered features:

• Relevant workspace data is sent to AI providers for processing
• We use embedding models to create searchable representations of your content
• AI providers process data according to their enterprise/API terms and do not use your data for model training
• Meeting transcriptions are processed through Google Gemini

4. Data Storage & Security

Your data is stored on Supabase infrastructure with encryption at rest and in transit. We implement industry-standard security measures including:

• Row-level security (RLS) policies ensuring workspace data isolation
• Encrypted connections (HTTPS/TLS) for all data transmission
• Secure authentication with JWT tokens and OAuth 2.0
• Regular security reviews of our codebase and infrastructure

5. Data Sharing

We do not sell your personal data. We share data only in these circumstances:

• Service Providers: Supabase (hosting/database), Vercel (frontend hosting), OpenAI and Google (AI processing), MeetingBaas (meeting recording)
• Legal Requirements: When required by law, regulation, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. Third-party services integrated into the platform may set their own cookies according to their respective privacy policies.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your workspace data
• Withdraw consent for optional data processing

To exercise these rights, contact us at hello@premise.so.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide services. When you delete your account or workspace, we delete associated data within 30 days, except where retention is required by law.

9. Children's Privacy

Premise is not intended for use by individuals under 16 years of age. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the effective date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at hello@premise.so.