Privacy Policy

1. Introduction

This Privacy Policy explains how Bhumika AI Pte. Ltd. ("Cisely", "we", "us", or "our") collects, uses, discloses, and protects personal information in connection with Cisely, our context-graph platform and related websites, applications, APIs, and services (the "Service").

It should be read together with our Terms of Service. By using the Service, you acknowledge the practices described here.

2. Information we collect

Account information: the name, email address, and organization/workspace details you provide when you create or join an account, and authentication data such as one-time codes and session tokens.

Content and model data: the content, data, and materials you and your workspace submit to the Service ("Your Content") — for example, the mission, beliefs, strategy, personas, goals, and other model entities you create.

Billing information: for paid plans, subscription and transaction details. Card and payment data are handled by our payment processor; we do not store full card numbers.

Usage and device data: how you interact with the Service (pages viewed, features used, events, timestamps), along with IP address, browser/device type, and similar technical information, collected through logs and cookies or similar technologies.

3. How we use information

We use personal information to: provide, operate, secure, and support the Service; authenticate you and manage your account and workspace; process subscriptions and payments; communicate with you about the Service, including service and security notices; and comply with legal obligations.

Improving and developing our products and services. Consistent with our Terms of Service, we may use Your Content and usage data to operate, maintain, analyze, improve, and develop our products and services — including to troubleshoot issues, improve existing features, develop new ones, and enhance the quality and AI capabilities of the Service. Where we use data for these purposes beyond providing the Service to you, we do so using aggregated and/or de-identified data wherever practicable.

4. Legal bases for processing

Where applicable law (such as the GDPR) requires a legal basis, we rely on: performance of our contract with you (to provide the Service); our legitimate interests (to secure, analyze, and improve the Service); your consent (where we ask for it, such as certain communications or cookies); and compliance with legal obligations.

5. Cookies and similar technologies

We use cookies and similar technologies for essential functions (such as keeping you signed in and protecting against cross-site request forgery), to remember preferences, and to understand and improve how the Service is used. You can control non-essential cookies through your browser settings; disabling essential cookies may prevent the Service from working properly.

6. How we share information

Within your workspace: content you create is accessible to other members of your tenant according to their roles and permissions.

Service providers: we share information with vendors who process it on our behalf — such as cloud hosting, payment processing, email delivery, analytics, and AI infrastructure providers — under contracts that require them to protect it and use it only to provide services to us.

Legal and safety: we may disclose information where required by law or to protect the rights, property, or safety of Cisely, our users, or others.

Business transfers: information may be transferred as part of a merger, acquisition, financing, or sale of assets, subject to this Policy.

We do not sell your personal information.

7. International transfers

We may process and store information in countries other than where you live. Where we transfer personal information across borders, we use appropriate safeguards (such as standard contractual clauses) as required by applicable law.

8. Data retention

We retain personal information for as long as your account is active or as needed to provide the Service, and thereafter as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. Aggregated or de-identified data may be retained for longer.

9. Security

We implement technical and organizational measures designed to protect personal information, including encryption in transit, tenant isolation, and access controls. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

10. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. You can exercise many of these directly in the Service or by contacting us at support@cisely.ai. For content within a workspace, the workspace administrator may also control certain data.

11. Children's privacy

The Service is intended for users aged 16 and over. It is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe someone under 16 has provided us personal information, contact us at support@cisely.ai and we will take appropriate steps to delete it.

12. Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the version and effective date below and, where appropriate, notify you. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

13. Contact us

Questions or requests about this Privacy Policy or your personal information? Contact us at support@cisely.ai.