Privacy Policy

1. Introduction

Penumbra ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cognitive operating system platform.

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Name (if provided)
• Organization information
• Authentication credentials (encrypted)

Content and Usage Data

We collect information you provide when using Penumbra:

• Projects, documents, and knowledge graphs you create
• AI interactions and conversations
• Files and data you upload
• Collaboration and sharing activities
• Usage patterns and feature interactions

Technical Information

• IP address
• Browser type and version
• Device information
• Log data and analytics

3. How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Penumbra platform
• Process your AI requests and generate insights
• Enable collaboration within your organization
• Improve and personalize your experience
• Communicate with you about updates and features
• Analyze usage patterns to enhance our services
• Detect, prevent, and address technical issues
• Comply with legal obligations

4. AI and Data Processing

Penumbra uses AI models to process your content and generate insights. Your data may be processed by third-party AI providers (OpenAI, Anthropic, etc.) to deliver AI-powered features. We ensure these providers maintain appropriate data protection standards.

Important: Your content is used solely to provide services to you. We do not use your proprietary data to train AI models for other customers.

5. Data Sharing and Disclosure

We may share your information with:

• Your organization members: Content you share within your organization is accessible to authorized team members
• Service providers: Third parties who assist in operating our platform (hosting, analytics, AI providers)
• Legal requirements: When required by law or to protect our rights
• Business transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

6. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption in transit (TLS/SSL)
• Encryption at rest for sensitive data
• Regular security audits
• Access controls and authentication
• Secure infrastructure (Supabase, Vercel)

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. You may request deletion of your data at any time by contacting us. We will retain and use your information as necessary to comply with legal obligations and resolve disputes.

8. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate data
• Request deletion of your data
• Export your data
• Opt-out of certain data processing
• Withdraw consent where applicable

To exercise these rights, contact us at [email protected]

9. Cookies and Tracking

We use cookies and similar technologies to maintain your session, remember preferences, and analyze platform usage. You can control cookie settings through your browser, though this may affect functionality.

10. Third-Party Services

Penumbra integrates with third-party services including:

• Supabase (authentication and database)
• Vercel (hosting)
• OpenAI, Anthropic (AI processing)
• Google (OAuth authentication)

These services have their own privacy policies. We recommend reviewing them.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

12. Children's Privacy

Penumbra is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of Penumbra after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

15. GDPR Compliance (EU Users)

If you are located in the European Economic Area, you have additional rights under GDPR:

• Right to data portability
• Right to object to processing
• Right to lodge a complaint with supervisory authorities
• Right to restrict processing

Our legal basis for processing your data includes contract performance, legitimate interests, and your consent.