1. Introduction

Darfera Ltd ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI Assistant platform (the "Service").

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Contact information (name, email address, phone number)
• Account credentials (password hashes, not plain text passwords)
• Company information (for corporate clients)
• Communication preferences

2.2 Usage Data

When you use our Service, we automatically collect:

• IP address and browser type
• Pages visited and features used
• Session duration and interaction patterns
• Device information

2.3 Document Content

You may upload documents to our platform, which may contain:

• Business documents, policies, and contracts
• Confidential or sensitive business information
• Personal data contained within your uploaded documents

3. How We Use Your Information

We use your information to:

• Provide and maintain our AI Assistant service
• Process and respond to your queries about uploaded documents
• Improve our AI models and service functionality
• Communicate with you about your account and service updates
• Comply with legal obligations and protect our rights

4. Data Processing and AI

Our AI Assistant processes your uploaded documents to provide intelligent responses. Key points:

• Local Processing: Document embeddings are processed locally using open-source models
• No Training: Your documents are not used to train third-party AI models
• Data Retention: Your documents are stored securely and can be deleted at any time
• Access Control: Only authorized users can access your uploaded documents

5. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

• Service Providers: Third-party vendors who help us operate our service (e.g., email providers, hosting services)
• Legal Compliance: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit and at rest
• Secure authentication with password hashing
• Regular security assessments and updates
• Access controls and monitoring

7. Your Rights

Depending on your location, you may have the right to:

• Access, correct, or delete your personal information
• Restrict or object to processing of your data
• Data portability (receive your data in a structured format)
• Withdraw consent (where applicable)

To exercise these rights, please contact us at [email protected].

8. International Data Transfers

Our services are hosted in the UK/EU. If you are located outside the UK/EU, your data may be transferred internationally with appropriate safeguards in place.

9. Children's Privacy

Our Service is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by posting the new policy on this page with an updated effective date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us:

Company Registration No. (pending)