1What this policy covers
Aantic AI ("Aantic", "we") provides agentic AI software for supply chain planning and analysis. We serve business customers in the United States.
This policy covers aantic.ai and the Aantic platform. It does not cover information collected offline, a customer's own systems, or third-party sites we link to. Aantic is a business product, and we do not knowingly collect information from anyone under 16.
2Our two roles
Your rights differ depending on which of these applies.
- We are the controller for information about website visitors, people who contact us or request a demo, and the account details of people who sign in. We decide how that information is used, and this policy governs it.
- We are a processor (a "service provider" under California law) for what customers put into the platform: uploaded files, queries, and the results generated from them ("Customer Data"). We handle Customer Data only on the customer's instructions, under the MSA and DPA we sign with that customer.
If your employer uses Aantic and you want to see or delete data in their workspace, contact your employer. They control that data, and we will support their request.
3What we collect, and why
| Category | What it includes | Why we have it |
|---|---|---|
| Demo requests and inquiries | Name, work email, company, and your message | To reply to you and follow up about our products, including occasional marketing email you can opt out of |
| Account data | Name, work email, and sign-in details | To create your account, keep you signed in, and secure it |
| Support and communications | Emails and messages you send us | To respond and keep a record of what we've discussed |
| Website and product analytics | IP address, browser and device type, pages visited, and how you navigate the platform. We record how people move through the platform with all text and inputs masked, so we see clicks and navigation, not your data. | To understand what's useful, fix problems, keep the site working, and protect it against abuse, spam, and attacks |
| Customer Data | Whatever the customer uploads or generates | To provide the platform, as a processor |
We collect this information directly from you, automatically from your browser when you use our site or platform, or from your employer when they set up your account.
4AI and model training
The platform uses large language models from the providers described in section 6 to interpret queries and produce analysis. Relevant Customer Data is sent to those providers for processing, and the result comes back to your workspace.
We do not use personal information or Customer Data to train AI models, and our providers are contractually barred from training on Customer Data.
Model output can be wrong. It is decision support meant to be reviewed by a person before anyone acts on it.
5Cookies and tracking
Our authentication provider sets cookies to keep you signed in. The platform cannot work without them.
We use PostHog for website and product analytics, which sets cookies to measure how the site and platform are used. PostHog also records sessions inside the platform so we can see where people get stuck. All text and inputs are masked, so recordings capture clicks and navigation without the data on your screen.
We do not track visitors across other websites, and we do not allow third parties to do so on our site for advertising. Because we don't do cross-site tracking, our site does not respond differently to Do Not Track signals. We treat Global Privacy Control signals as a request to opt out of the sale or sharing of personal information. We do neither.
6Who we share it with
We do not sell personal information, and we do not share it for targeted advertising.
- Service providers. Third parties that provide services on our behalf, each bound by written terms, allowed to use information only to provide services to us, and given only what that service requires. They include services such as hosting and storage (Cloudflare, Supabase, Railway), AI model processing (Anthropic, Google), analytics (PostHog), and authentication and email delivery. Customers receive our full subprocessor list with their DPA.
- Your employer. If your account belongs to a customer's workspace, that customer's administrators can see your account details and activity in the workspace.
- Legal requirements. When we believe in good faith that disclosure is required by law, subpoena, or court order, or is needed to protect the rights, property, or safety of Aantic, our customers, or others.
- Business transfers. If Aantic is involved in a merger, acquisition, or sale of assets, personal information may transfer as part of that transaction and will remain subject to this policy.
7How long we keep it
- Account data: deleted within 90 days after an account is closed.
- Demo requests and inquiries: kept for 2 years after our last contact with you.
- Analytics: event data kept for 1 year, session recordings kept for 30 days.
- Customer Data: kept and deleted as set out in the customer's MSA and DPA.
Deleted data is removed from our backups as those backups expire on their normal schedule. We may keep information longer where the law requires it.
8Security
We encrypt data in transit and at rest, require multi-factor authentication for staff with production access, and keep each customer's workspace separate. See our Security page for details.
9Your rights
If you live in a state with a consumer privacy law, you can ask us to:
- Tell you what personal information we hold about you, and give you a copy
- Correct anything that's wrong
- Delete it
Some states also give you the right to opt out of the sale of personal information, targeted advertising, and profiling. We don't do any of these.
You can stop marketing email at any time, using the unsubscribe link in any such message or by telling us. You will still receive service and security notices for an account you hold.
Making a request. Email support@aantic.ai. We'll confirm who you are, then respond within 30 days. If a request is complicated and we need longer, we'll tell you why and when to expect an answer. An authorized agent can make a request for you, and we may ask for proof they're acting on your behalf.
If we turn down a request, we'll explain why, and you can ask us to reconsider. We won't treat you differently for exercising any of these rights.
If your data is in a customer's workspace. Your employer controls that data, and we handle it on their instructions. Contact them directly, and we'll support their request.
10Changes to this policy
If we change this policy, we will update the date at the top. If a change materially affects how we use your personal information, we will notify account holders by email before it takes effect.
11Contact us
Aantic AI
support@aantic.ai