Privacy Policy (GDPR / CCPA Compliant)

1. Data Controller & Overview

GRAVITEX AI GLOBAL LLC, a limited liability company organized under the laws of the State of Wyoming, United States ("we", "us", "our"), respects your privacy and is committed to protecting personal data processed through GRAVITEX AI Studio (https://gravitexai.com and https://app.gravitexai.com). This Privacy Policy complies with applicable U.S. privacy laws, the California Consumer Privacy Act (CCPA/CPRA), and the EU General Data Protection Regulation (GDPR).

2. Information We Collect

Account & Workspace Information: When you register, subscribe, or request support, we collect your name, business email address, billing details (processed securely via PCI-DSS Level 1 compliant payment processors such as Stripe; we never store raw payment card numbers on our servers), and workspace preferences.

Diagram & Prompt Data: We process the natural language prompts, uploaded reference files, and diagram XML structures necessary to render and update your diagrams on the canvas. Local diagram sessions are stored in your browser's local storage unless explicitly synced to a cloud workspace.

Technical Telemetry & Quota Protection: We collect minimal operational metrics (such as anonymized IP identifiers, browser type, request latency, and daily token usage quotas) solely to ensure service reliability, enforce fair-use rate limits, and prevent automated abuse.

3. How We Use & Process Data (Zero Model Training)

We use your data strictly to: (a) provide, maintain, and improve the AI diagram generation service; (b) manage workspace quotas and subscription billing; and (c) provide technical support and security monitoring.

No AI Training on Customer Diagrams: We do NOT use your proprietary cloud architecture diagrams, prompts, or uploaded documents to train foundation AI models.

4. Subprocessors, Data Retention & Transfers

We engage trusted enterprise subprocessors solely to deliver the Service, including cloud infrastructure providers, enterprise LLM API providers (via secure server-to-server connections), and payment processors. Cross-border data transfers to the United States are protected by Standard Contractual Clauses (SCCs) and industry-standard encryption.

5. Children's Privacy (COPPA)

GRAVITEX AI Studio is a professional B2B engineering tool and is not directed to individuals under the age of sixteen (16). We do not knowingly collect personal information from children under 16. If we become aware that a child has provided us with personal data, we will promptly delete such information.

6. Your Rights Under GDPR, CCPA & U.S. State Laws

You have the right to access, rectify, export (data portability), or erase your personal data, as well as the right to restrict or object to certain processing. California and applicable U.S. state residents have the right to know what personal information is collected, the right to request deletion, and the right to non-discrimination. We do not sell or share personal information for cross-context behavioral advertising.

To exercise your privacy rights or contact the Privacy Team at GRAVITEX AI GLOBAL LLC (State of Wyoming, United States), email us at: [email protected].