Privacy Policy

Dharit Gabani, trading as August AI, is the individual operator of August and is based in India. Our contact address is 88 East San Carlos St, San Jose, CA 95112, United States. This policy explains our handling of personal information through the website, free tools, visibility platform, iOS app, support and related services. Contact [email protected] for privacy requests.

We determine how account, billing, security and our business information are used. When a business instructs us to process information within its workspace, it may be responsible for that information and we may act on its behalf. If your organization manages your workspace, its administrators control relevant access and settings. Contact it about information it supplies to us; we assist with requests as applicable.

We handle account and contact information; workspace membership and settings; brands, domains and prompts you submit; scan answers, citations, recommendations, drafts and reports; and communications you send us. Public website analysis can include page text, HTML, technical metadata, links and screenshots, including personal information present on the pages retrieved.

Optional analytics connections can supply property identifiers, dates, page URLs, search queries, sources and aggregate traffic or conversion measures. URLs and queries may themselves contain personal information. GitHub features process the repository information and proposed content needed for the action you request. Integration providers handle connection grants or credentials used to authorize access.

We receive subscription status, purchase identifiers, invoices and related payment metadata. Stripe or Apple processes payment details for its purchase channel; August does not store the complete card details entered into those payment systems. RevenueCat helps verify App Store purchases and entitlements.

When you use August, service providers and our systems process connection, device, request and security information. If enabled, website analytics also records usage events. The iOS app registers a device token when you enable push notifications. If you arrange a meeting or ask for support, the relevant scheduling or support service processes the information you provide.

We use information to operate accounts, run requested analysis, prepare proposed fixes, deliver reports and purchases, synchronize connected services, maintain subscriptions, provide support, protect the service and meet legal obligations. We also use permitted usage information to understand product reliability and improve the experience.

Where a legal basis is required, we use the basis appropriate to the activity: performing our agreement, legitimate interests such as securing and administering a business service, consent where required, and compliance with law. You can withdraw consent without changing the lawfulness of earlier processing. For example, account and purchase information supports performance of our agreement with you. Business contact and operational security information may be processed for our legitimate interests in running a secure service, balanced against your rights. Records needed for tax or legal compliance are processed to meet legal obligations. Where consent is required, requesting a service or accepting terms does not replace that separate consent.

Requested AI features send relevant prompts and context to the model or search providers used for that feature. Responses are stored so you can inspect the answers, sources and changes over time. Do not submit confidential or sensitive personal information that is not needed for the analysis.

AI providers also apply their own service terms and data-handling policies, including applicable retention and abuse-monitoring practices. This policy does not promise that every provider offers zero retention. Ask us about the processing arrangements for a feature before submitting material that requires specific confidentiality, training-use or retention restrictions.

Google connections are used for the disclosed analytics features within the permissions granted. We limit our access and use to the analytics functionality disclosed to you and the permissions you grant. Our handling of information received from Google APIs is subject to the Google API Services User Data Policy and any applicable Limited Use requirements. We do not use connected Google analytics information for advertising targeting or sell it. Disconnecting a service stops future collection; request deletion separately for previously stored information where applicable.

We use providers for hosting, storage, identity, billing, communications, integrations, AI analysis and security. Relevant providers may include Cloudflare, Vercel, Neon, Clerk, Stripe, Apple, RevenueCat, Customer.io, Composio and PostHog, and OpenAI, Google, Anthropic, Perplexity or DataForSEO for enabled analysis. Cloudflare, Vercel and Neon provide infrastructure; Clerk supports identity; Stripe supports web billing; Apple and RevenueCat support app purchases and entitlements; Customer.io supports communications; Composio supports connections; and PostHog supports website analytics where enabled. Model and search providers receive the inputs needed for the enabled analysis. Calendly and your chosen calendar provider process scheduling information when you book through them. Which providers receive your information depends on the features you use. Contact us for information about the providers involved in your processing.

Members of your workspace receive information according to their access. People with a report-sharing link can view what you chose to share. GitHub receives content submitted through the PR feature. Publishing or placement suppliers receive materials required to fulfill orders you authorize. These disclosures are distinct from private workspace storage.

We may disclose information where necessary to comply with law, protect rights and security, or undertake a business transfer with appropriate protections. We do not sell or rent personal information. This statement does not mean that no information is disclosed: the service providers and user-directed sharing described above still receive information.

Authentication and security features may use cookies or similar storage needed to provide the service. Optional analytics must be described separately from these essential functions. When our PostHog website analytics is enabled, it receives page-view and usage information, which can include the page URL and browser or device information, and may use browser identifiers or local storage. We use this to understand website use and reliability. This is separate from a PostHog project that you choose to connect for your own brand analytics.

You can manage cookies and site storage through your browser settings. Blocking necessary storage can affect login or other features. Contact [email protected] about analytics choices. Browser controls are not a substitute for any consent that the law requires us to obtain.

You can manage push permissions through the app and device settings, and choose available report or alert settings. You can ask us to stop marketing messages by contacting [email protected] or using an unsubscribe option provided in a message. Necessary service and billing messages may still be sent while they are relevant to your account.

We keep information for the purposes described here, with periods determined by the information type, service needs and legal requirements. A plan's accessible history window is not necessarily the period for every copy in storage. We consider whether information is needed for an active workspace, the history made available under a plan, a requested report or order, support, security, and applicable recordkeeping or dispute periods. Raw crawl evidence and stored measurements can have different retention periods. Financial records may be retained after a subscription or workspace ends where required for tax, accounting, refunds or disputes. Backup copies can persist until their normal replacement or expiry; they are not intended for continuing product use. Contact us for the retention criteria relevant to your information.

You may request access, correction, export or deletion. Closing a workspace blocks product access, but it is not an immediate erasure of every record. Financial, dispute, security or other legally required records may need to be retained for the applicable period. Send an erasure request to [email protected]. We assess the information in scope, your authority to request deletion and any lawful retention obligation, and explain the outcome or any justified limitation. Disconnecting an integration, uninstalling the app and canceling a subscription do not themselves erase every stored record. You may submit a personal-data request even if billing or an order remains unresolved.

Our providers may process information outside your country. This includes processing by the operator in India and relevant service providers in the United States and other locations in their service arrangements. A US contact address does not mean your information stays in the United States.

Where data protection law restricts a transfer, an applicable legal mechanism and safeguards are required, such as an adequacy decision or appropriate contractual clauses and supplementary measures. Merely accepting this policy does not waive those requirements. Contact [email protected] for information about the destinations and safeguards for your processing. We must establish any required transfer arrangement before carrying out the restricted transfer.

Depending on the law that applies, you may have rights to access, correct, delete, export, restrict or object to processing, withdraw consent, and complain to a relevant supervisory authority. Send requests to [email protected]. We may need to verify identity and authority, and will respond within applicable time limits. For people in the EEA or UK, applicable rights can include access, correction, erasure, restriction, portability and objection, as well as withdrawal of consent and complaints to your local supervisory authority. UK complaints can be made to the Information Commissioner's Office at ico.org.uk.

Where applicable US state privacy laws give you rights to know, correct, delete, obtain a copy, opt out of specified processing, or appeal a request decision, contact [email protected] to exercise them. You may use an authorized agent where permitted by law. We will not unlawfully discriminate against you for exercising your rights. We will explain a refusal and any available appeal process.

For India-related privacy questions, requests or grievances, contact Dharit Gabani at [email protected]. Rights and response obligations apply according to the Indian laws and provisions in force at the relevant time.

We apply appropriate safeguards and restrict access according to service needs. No system is completely secure. August is intended for business users aged 18 or older, including freelancers and sole traders. Contact us if you believe a child has provided information inappropriately.

We will date policy updates and give additional notice or seek consent when required. Contact Dharit Gabani, trading as August AI, at 88 East San Carlos St, San Jose, CA 95112, United States, [email protected] with questions.