Privacy Policy

Last updated: September 4, 2026

This Privacy Policy explains how Polimorf (“Polimorf”, “we”, “us”) collects, uses, discloses and safeguards personal data when you use our website, dashboard and API (together, the “Services”). It applies to visitors, account holders and the members of teams that build on Polimorf.

1. Data we collect

We collect the following categories of data:

  • Account data — name, email, workspace and authentication identifiers (including data from Google sign-in when you choose it).
  • Usage & telemetry — logs, request metadata, device and browser information, and diagnostic events used to operate and secure the Services.
  • Customer content — the prompts, assistants, knowledge sources, tool definitions and inputs you and your end users submit through the dashboard or API.
  • Billing data — plan, usage counts and, where applicable, information processed by our payment provider (we do not store full card numbers).

2. How we use data

We use personal data to:

  • provide, maintain and secure the Services;
  • authenticate users and manage workspaces and permissions;
  • route requests to AI model providers and return responses to your application;
  • monitor usage for billing, abuse prevention and reliability; and
  • communicate service, security and product updates.

3. Customer content & AI inputs

Content you send through the Services is processed on your behalf to deliver the feature you requested — for example, executing an assistant or performing a knowledge search. We do not use your customer content to train our own foundation models. Where you connect your own model provider keys (“bring your own keys”), your inputs and outputs are transmitted to that provider under their terms, and their handling of that data is governed by their policies.

4. Model providers & sub-processors

Polimorf relies on infrastructure and AI model providers to run the Services. These sub-processors may process customer content solely to provide their service to us or to you. Categories include cloud hosting, object storage, database and queue infrastructure, telemetry, and the AI model providers you enable.

Where the GDPR or similar laws apply, we process personal data on the bases of performance of a contract, our legitimate interests in operating and securing the Services, compliance with legal obligations, and your consent where required.

6. How we share data

We do not sell personal data. We share data only with: (a) sub-processors that operate the Services under contract; (b) other members of your workspace, according to the roles you configure; (c) authorities where required by law; and (d) parties to a merger or acquisition, subject to this Policy.

7. Retention

We retain personal data for as long as your account is active and as needed to provide the Services, then for the period required to meet legal, accounting or security obligations. You can delete customer content and request account deletion as described below.

8. Security

We apply administrative, technical and organizational measures appropriate to the risk, including encryption in transit, access controls, tenant isolation and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International transfers

We may process and store data in countries other than your own. Where we transfer personal data internationally, we use appropriate safeguards such as standard contractual clauses.

10. Your rights

Depending on your location, you may have the right to access, correct, delete, port or restrict the processing of your personal data, and to object to certain processing. To exercise these rights, contact us at privacy@polimorf.app. If we process data as a processor on behalf of a customer, we will refer your request to that customer.

11. Children

The Services are not directed to children under 16, and we do not knowingly collect their personal data.

12. Changes to this Policy

We may update this Policy from time to time. Material changes will be posted here with a new “Last updated” date and, where appropriate, additional notice.

13. Contact

Questions about this Policy or our data practices can be sent to privacy@polimorf.app.

This document is a general template and does not constitute legal advice. Review it with qualified counsel and complete your legal entity, registered address and governing jurisdiction before publishing.