Product.ai Beta Program
Welcome
This Beta Program Privacy Notice (“Notice”) for Product.AI Inc. ("Company," "we," "our," or "us") explains how we collect, use, store, and share your personal information through the Product.AI Beta Program (the "Program"). This Notice supplements Company's Privacy Policy available at product.ai/privacy. Where this Notice and the Privacy Policy conflict, this Notice controls.
About Us and This Notice
Contact Us
If you have any questions about this Notice, please email us at support@product.ai or write to us at Product.AI Inc., 12100 Wilshire Blvd., Suite 950, Los Angeles, CA 90025.
Changes to This Notice
We will update this Notice when necessary to reflect changes in the Program, how we use personal information, or applicable law. Anytime we modify this Notice, we will revise the Last Update date above. If we make material changes to this Notice, we will provide notice or obtain consent regarding such changes as may be required by law.
When This Notice Applies
This Notice applies to: (a) visitors to the Program's application page, (b) applicants who submit an application, whether or not they are admitted to the Program, and (c) testers who are admitted to the Program and access the beta version of our AI shopping assistant (the “Product”). However, some collection and use of information falls outside this Notice:
- Outside Services. The Product may link to, embed, integrate, or otherwise connect you with third-party websites, services or other events or activities that are not owned or controlled by Company (“Outside Materials”). Outside Materials are not part of the Product. This Notice does not apply to any information you may exchange with providers of Outside Materials. Those third parties have their own policies and practices about data. We encourage you to familiarize yourself with their privacy notices and applicable contractual terms.
- Our Personnel. If you are a current or former employee or contractor of ours, this Notice does not apply to you. Reach out to your human-resources partner or supervisor with any inquiries about your personal information.
Information We Collect and Why We Use It
We and our third-party service providers collect and process information when you interact with the Program and the Product. This includes:
- Information you submit or provide directly, and
- Data collected automatically (which we call “Usage Data”).
The following tables describe the information we collect and use and the purpose behind that processing.
Information Submitted by Applicants
| What we collect | Why we process it | Retention |
|---|---|---|
| Name and email address | To evaluate the application and communicate with the applicant | 12 months after admission decision |
| Written application responses | To evaluate the application | 12 months after admission decision |
| Age and U.S. residency attestation | To verify eligibility | 12 months after admission decision |
| Consent record (timestamp, version, and identity) | To document that consent was given | As long as necessary to document that consent was given |
Information Submitted by Testers
In addition to the information collected at application, the following is submitted by testers:
| What we collect | Why we process it | Retention |
|---|---|---|
| Account management data (login credentials and account actions) | To create and maintain your account and administer the Program | See “How Long We Retain Your Information” below |
| Communications data (interactions with us via email) | To respond to your requests | Duration of membership |
| Chat data (questions and responses) | To provide and improve the Product | 90 days |
| Deliberate feedback (flags, ratings, written notes, and questions on which you file a report) | To improve the Product | See “How Long We Retain Your Information” below |
| Display name (the name you choose for attribution of your feedback) | To attribute your deliberate feedback according to your preference | Duration of membership |
| Consent record (timestamp, version, and identity) | To document that consent was given | As long as necessary to document that consent was given |
Usage Data
| What we collect | Why we process it | Retention |
|---|---|---|
| Device and access information (IP address, device identifiers, browser type, browser signals, city, and region) | To maintain the security and integrity of the Program and to prevent automated access | 90 days |
Security
We have implemented technical, administrative, and physical security measures designed to protect your information from unauthorized access, use, or disclosure. No data transmission online is completely secure, and we cannot guarantee the security of any information you provide. We are not responsible for the circumvention of any privacy settings or security measures we may provide.
Our Disclosures of Information to Others
Functional Disclosures
We contract with service providers to provide certain services related to the functionality and operation of the Program. Service providers are not permitted to use information about you for any purpose other than performing their services for us. We disclose personal information to the following types of service providers:
- AI service providers, namely Anthropic, to generate the Product's responses to tester questions and to perform related functions such as web search. Among other data, they receive your questions and recent conversation context.
- Hosting and infrastructure providers, namely Cloudflare, to store Program records, provide sign-in, and maintain security. Among other data, they receive device and browser signals.
- Email service providers, namely Resend, to deliver Program communications and sign-in credentials.
- Authentication, quality assurance, and font delivery providers, namely Google, to provide sign-in services, to verify the accuracy of the Product's automated processes, and to render fonts on Program pages. Among other data, they may receive your email address, display name, IP address, and browser information.
- Code hosting providers, namely GitHub, to store and manage certain Program records.
- Payment infrastructure providers, namely Stripe. A customer record containing your email address and name is created at account registration. Stripe does not process payments in connection with the Program.
We do not sell personal information collected through the Program. We do not share personal information for cross-context behavioral advertising.
For Legal Reasons
We also may disclose personal information:
- In response to subpoenas, court orders, or other legal process, or to establish or exercise our legal rights or defend against legal claims;
- When we believe it is appropriate to investigate, prevent, or take action regarding illegal or suspected illegal activities, or to protect the rights, property, or safety of the Company, our users, or others; or
- In connection with a corporate transaction, such as a divestiture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy.
How Long We Retain Your Information
Retention periods for each category of information are stated in the tables above. Where a specific retention period is not stated, we retain the information for as long as necessary to fulfill the purposes for which it was collected. We may retain information for longer periods when required by law or legal process.
Use by Minors
The Program is limited to residents of the United States who are at least 18 years of age. We do not knowingly collect information from anyone under the age of 18. If we learn that we have collected information from a person under the age of 18, we will delete that information as quickly as possible. If you are under the age of 18, do not use the Product or submit any information to us. If you are a parent or guardian and believe your child has provided information to us, please contact us at support@product.ai.
How to Control Your Privacy
Exercising Your Rights
As a participant in the Program, you have rights and choices about your personal information. The following sections describe how to exercise those rights and the specific rights available to you depending on where you reside.
Submitting Requests. To exercise any rights described in this Notice, please email us at support@product.ai. Your request must provide sufficient information to identify you and the law that applies to you, such as your name and email address.
Verifying Requests. We verify requests by attempting to match information in the request to information we maintain. We may require you to confirm your identity by authenticating through your account.
If your request is unclear or we are unable to authenticate your identity, we may ask for more information, in accordance with the law that applies to you.
If you are an authorized agent submitting a request on a user’s behalf (where permitted), we may require proof of the user’s written authorization before processing the request.
If we cannot verify the identity of the data subject in the request, we may deny it, in full or in part.
Responses to Requests. We will respond to your request as quickly as we can, taking into account the nature of your request and the volume of pending requests. The content of our response will vary with the nature of your request, but we always will respond in accordance with any deadlines or requirements specified by the laws that apply to you.
At times, we may be unable to provide responsive personal information, such as when disclosure would create a substantial, articulable and unreasonable risk to the security of the information, user accounts, or the security of our systems or networks. We do not disclose account passwords or any other non-personal information that enables access to an account.
We reserve the right to retain an archive of any deleted information, to the extent permitted by law. We may also retain deidentified or aggregate data derived from personal information.
Appealing Decisions. Residents of jurisdictions that provide for an appeal mechanism may appeal a decision we have made regarding their requests by emailing us at support@product.ai.
Your Rights Under State Privacy Laws
If you are a resident of California, Colorado, Connecticut, Virginia, Utah, or another state with a comprehensive data privacy law, you may have the following rights that you can exercise by contacting us:
- Access and/or receive a copy of the personal information we have collected about you
- Delete personal information we have collected from you
- Correct inaccurate personal information we maintain about you
- Opt out of the sale or sharing of your personal information
- Opt out of the processing of your personal information for profiling in furtherance of decisions that produce legal or similarly significant effects
- Not be discriminated against for exercising your rights
More for California Users
In addition to the rights described above, California residents are afforded the following information under the California Consumer Privacy Act ("CCPA").
Our Collection and Use of Personal Information. Information we collect falls into these CCPA-defined categories: identifiers (such as your email address and display name); internet or other network information (your interactions with the Product); and other information that identifies or can be reasonably associated with you. To the extent we collect sensitive personal information as defined by the CCPA (such as health-related information arising from tester questions), we do not use or disclose it other than for purposes for which there is not a right to limit under the CCPA.
Disclosure of Personal Information. We disclose personal information to service providers as described above for business purposes, including providing and improving the Product, administering the Program, and maintaining security.
No Sale or Sharing. We do not sell or share personal information collected through the Program as those terms are defined in the CCPA.