Privacy Policy

1. Overview & Commitment

CuboidPilot Technologies ("CuboidPilot", "we", "our", or "us") provides an integrated customer engagement platform and the autonomous AI agent Cai. We are committed to treating customer data with strict privacy, encryption, and multi-tenant isolation. This policy outlines what data we collect, how it is processed, and your privacy rights under applicable data protection laws including GDPR and DPDP Act.

2. Information We Collect

• Account & Workspace Data: Name, work email address, company name, phone number, and password hashes when you create a CuboidPilot workspace.
• Customer Conversation Data: Customer chat queries, timestamps, session identifiers, channel metadata (Web, WhatsApp), and counsel notes exchanged through the platform.
• Visitor & Lead Information: Contact details shared voluntarily by visitors (such as full name, WhatsApp/phone number, email address, inquiry requirements, and timeline).
• Company Knowledge Base: Documentation, FAQs, URLs, and pricing spreadsheets uploaded by workspace administrators to train their company-specific AI persona.
• Technical & Log Data: IP addresses, browser user-agents, cookie tokens, and diagnostic error logs used solely for performance monitoring and security defense.

3. Multi-Tenant Isolation & AI Privacy

Your data belongs to your company. We enforce architectural multi-tenant database query isolation. Company A’s uploaded documentation and visitor conversations are never shared with, accessible to, or used to answer inquiries for Company B.

No Foundation Model Training: Customer conversations and proprietary company knowledge are never used to train public Large Language Models (LLMs) or shared with unapproved third parties.

4. Third-Party Integrations & Sub-Processors

To deliver messaging continuity and cloud processing, we interface with verified infrastructure providers:

• Meta Cloud API (WhatsApp & Instagram): Delivers two-way omnichannel messaging when authorized by the company.
• Payment Processors (Razorpay / Stripe): Processes transactions securely via server-verified webhooks without storing raw card credentials.
• Google Workspace (Calendar & Meet): Generates appointment events and meeting links when calendar sync is connected.
• Inference Infrastructure (Groq): Fast, private semantic reasoning for grounded knowledge extraction without retention.

5. Cookies & Tracking

We use essential HTTP cookies for authenticated user sessions, workspace verification, and CSRF protection. We do not use third-party cross-site advertising trackers or sell customer lead lists to data brokers.

6. Data Retention, Portability & Deletion

Workspace administrators may request full export or permanent deletion of their company leads, visitor conversations, and knowledge sources at any time. Upon verified cancellation, customer data is purged from live systems within 30 days.

7. Contact Us

For privacy inquiries, data deletion requests, or compliance auditing questions, please contact our data protection team directly at: