Privacy Policy

BeforeQuery ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our AI employees and related services.

It covers our website (beforequery.com) and the forms on it, and the BeforeQuery service: the dashboard, the AI employees, and the connections to your tools (together, the "Service").

We play two different roles, depending on whose data it is:

• Controller for the details you send us through our website and for your account data: who you are, how you sign in, how you pay, and how you use the dashboard.
• Processor for the data in the tools you connect and for the requests your team makes. You decide what an AI employee can reach and what it may do. We process that data only to provide the Service to you, as set out in our Data Processing Agreement.

If a BeforeQuery AI employee handled your data for another company, for example by answering your ticket or changing your access, that company controls your data. Please contact them first about it. We will help them answer your request.

From our website

• Details you send through our contact and demo forms: your name, work email, company, company size, the AI employee you are interested in, and your message

Information you provide

• Account information (name, email, password)
• If you sign in with a provider such as Google or your company's single sign-on: your name, email address and profile picture from that provider
• Workspace details: team members you invite, their roles, and your settings
• Billing information (processed by Stripe, our payment provider)
• Support communications

Data we process on your behalf

• Data from the tools you connect, such as documents, tickets, customer records, campaigns and chat messages, as far as an AI employee needs it for the work you give it
• Knowledge you give an AI employee, such as policies, brand guidelines and how your team works
• Access tokens, API keys and passwords you give us to reach your tools

Requests, approvals and actions

• Requests your team makes, and the plans, drafts and answers an AI employee writes
• Approval decisions, and who made them
• Actions taken in your connected tools, and the record of who asked, who approved and what changed

Information collected automatically

• Log data (IP address, browser type, pages visited)
• Device information
• Usage analytics
• Cookies and similar technologies

• Respond to your messages and demo requests
• Provide and maintain the Service, including planning and doing the work you ask an AI employee for, and keeping a record of it
• Process your transactions
• Send service-related communications
• Improve our platform
• Detect and prevent fraud
• Keep the Service secure, for example by blocking bots and abuse

Where laws such as the GDPR apply, we rely on these legal bases:

• Contract: to run your account and provide the Service you signed up for
• Legitimate interests: to answer your enquiries, secure the Service, prevent abuse and improve the product
• Consent: for marketing emails. You can withdraw consent at any time.
• Legal obligation: to keep billing records and respond to lawful requests

• To do a piece of work, an AI employee sends the request and the parts of your data it needs to an AI model, which writes the plan, draft or answer.
• Actions in your tools run through the connections you set up, within the permissions you grant, and wait for approval where your rules require it.
• We do not use your content or requests to train AI models, and our AI providers do not use them to train theirs.

We do not sell your personal information. We may share information with:

• Service providers (sub-processors) who assist in our operations
• Legal authorities when required by law
• Business partners with your consent
• A buyer or successor, if BeforeQuery is merged, acquired or sells its assets. This policy will keep applying to your data.

Service providers

To run our website and provide the Service, we share limited data with these providers:

Tools you connect

When you connect a tool, an AI employee reads from it and acts in it only as you set up and approve. Those tools handle data under their own privacy policies. You can disconnect them at any time.

• Our website does not use advertising cookies. Our hosting provider, Cloudflare, may set cookies needed for security and performance.
• The dashboard uses cookies and browser storage to keep you signed in and to protect sign-in from forgery. These are required for it to work.

If you book a demo or send us a message, we will email you about it. Once you use the Service, we send service emails such as invitations, password resets and notices about your workspace. You can unsubscribe from marketing emails at any time.

We implement industry-standard security measures to protect your data, including encryption in transit and at rest, and access controls. However, no method of transmission over the internet is 100% secure.

• Passwords are stored as hashes, never in plain text.
• Credentials for the tools you connect are encrypted and never shown again after you save them.
• Every request, approval and action is recorded, so you can see who asked, who approved and what changed.

If a breach affects your data, we will tell you without undue delay, and within 72 hours of learning about it. See our Trust page for more.

We keep the details you send through our website forms for as long as we need them to answer you and follow up on your request, and delete them sooner if you ask.

We keep account and workspace data for as long as your account is active or as needed to provide the Service. Removing a connection stops an AI employee from reaching that tool. When an account is closed, we delete or return its data within 30 days, unless the law requires us to keep it. Billing records are kept as long as tax law requires. You can request deletion of your data at any time by contacting us.

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing
• Data portability
• Withdraw consent

To use any of these rights, email [email protected]. We may ask you to confirm your identity first, and we reply within 30 days. You can also complain to your local data protection authority. We do not sell or share personal information for advertising, and we treat everyone who uses a privacy right the same way.

Your data may be transferred to and processed in countries other than your own, including the United States, where our providers operate. We ensure appropriate safeguards are in place for such transfers in compliance with applicable laws. For data from the European Economic Area, the UK and Switzerland, we use the European Commission's Standard Contractual Clauses.

AI employees plan and carry out work automatically. Each customer decides which actions need a person's approval first. If an action by an AI employee affects you, you can ask the company that uses it to have a person review it.

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. If a change is significant, we will also email workspace owners before it takes effect.

If you have questions about this Privacy Policy, please contact us at:

Email: [email protected]
Address: Atatus, Inc., 131 Continental Dr, Suite 305, Newark, Delaware 19713, United States