Privacy Policy

1. Who We Are

Client Intelligence ("we," "us," or "our") is operated by Client Intelligence LLC. We provide an AI-powered platform for consultants at clientintelligence.ai. Questions? Contact us at assistant@joshforti.com.

2. Information We Collect

Information you provide directly:

• Account information: name, email address, company name
• Payment information (processed by Stripe — we never store card details)
• Content you upload or import: frameworks, client files, transcripts, notes, and connected-app content you choose to bring into the Service
• Chat messages and AI conversations
• Feedback you submit

Information collected automatically:

• Usage data: pages visited, features used, AI model usage and token counts
• Device and browser information
• IP address and general location
• Error logs for platform reliability

3. How We Use Your Information

• Provide and improve the Client Intelligence platform
• Process payments and manage subscriptions
• Send transactional emails (receipts, important account notices)
• Respond to support requests and feedback
• Monitor usage for billing, rate limiting, and abuse prevention
• Maintain platform security and reliability

We do not use your client data or proprietary frameworks to train AI models. Your business content is yours.

4. AI Services

Client Intelligence uses third-party AI providers, including Anthropic, OpenAI, xAI, and Perplexity, to power our chat and research features. When you use these features, your messages and relevant context are sent to these providers for processing. These providers have their own privacy policies and data handling practices.

We do not use your data to fine-tune or train AI models. Context sent to AI providers may include your frameworks, client files, and connected-app content only as needed to generate responses or perform actions you request.

5. Data Sharing

We share data only with:

• Supabase — database and authentication hosting
• Vercel — application hosting and infrastructure
• Stripe — payment processing
• Anthropic, OpenAI, xAI, Perplexity — AI inference (only the content needed to respond or perform a requested action)
• Law enforcement — only when required by valid legal process

We do not sell your data to third parties. Ever. We do not use your data, including Google user data, for advertising.

6. Data Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), row-level security in our database, and access controls. Your data is logically isolated per account. No security measure is 100% foolproof — if you become aware of a security issue, please contact us immediately.

7. Data Retention

We retain your data for as long as your account is active. When you delete your account, we delete your personal data and content within 30 days, except where we are required by law to retain it (e.g., financial records for 7 years).

OAuth tokens for connected apps are retained until you disconnect the app, revoke access with the provider, or delete your account. Imported documents, saved workspace calendar events, chat history, generated outputs, and other content created from connected-app data are retained under the same account retention and deletion controls as your other workspace content.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Opt out of non-essential communications

To exercise any of these rights, email assistant@joshforti.com.

9. Google User Data - Privacy Disclosures

Client Intelligence accesses Google user data through authorized OAuth integrations. Users explicitly grant access through Google's OAuth consent flow. Client Intelligence optionally integrates with Google Drive, Gmail, and Google Calendar when you connect your Google account. We request Google access only to provide the connected features you enable in your account or workspace.

Data Accessed

• Google Drive: file and folder names, IDs, MIME types, timestamps, shared-drive metadata, and the contents of files you select for import, accessed when users browse Drive or import selected files into the platform.
• Gmail: email thread content, message body, subject lines, sender and recipient metadata, timestamps, snippets, labels, and message or thread IDs, accessed when users search their inbox or read email threads within the platform.
• Google Calendar: event titles, descriptions, start and end times, locations, attendee information, organizer information, event links, status, and related event metadata, accessed when users view, import, or sync calendar events through the platform. Calendar write access is not requested by default and is used only if a writable Calendar feature is explicitly enabled.
• Google account profile: name and email address, used for authentication, account identification, connection status, and maintaining the OAuth connection.

Data Usage

Google user data is used solely to provide the features the user requests within Client Intelligence. Specifically:

• Google Drive data is used to let users browse Drive, choose files, and import selected documents into the correct account, client, or workspace knowledge area.
• Gmail data is used to surface relevant email threads and search results inside the Intelligence interface, allowing users to reference client communications in context.
• Google Calendar data is used to display and sync calendar events and to support scheduling context, meeting context, and delivery-memory features within client workspaces.
• Google account profile data is used to authenticate users, identify the connected account, and associate users with the correct workspace.
• When a user asks the AI to reference a Drive file, email, or calendar event, the relevant data is sent to the AI model to generate a response, limited strictly to what is needed for that request.

Google user data is never used to train AI models and is never repurposed beyond the functions described above.

Data Sharing

Client Intelligence does not sell Google user data. Data is shared only as necessary to operate the service:

• AI model providers, including Anthropic, OpenAI, xAI, and Perplexity: when a user asks the AI to read a Drive file, email thread, or calendar event, the relevant data is transmitted to the model provider to generate a response. This is limited to the specific data needed for that individual request.
• Infrastructure and hosting providers, including Vercel and Supabase: Google user data may pass through or be stored on these platforms as part of normal application hosting and database operations, under standard data processing agreements.
• No Google user data is shared with advertising networks, data brokers, or any third party beyond what is required to deliver the service.

Data Storage & Protection

Client Intelligence takes the following measures to protect Google user data:

• All customer data is encrypted at rest using AES-256 and encrypted in transit via TLS.
• OAuth access tokens and sensitive credentials are additionally encrypted at the application layer before being stored in the database, providing a second layer of protection beyond standard database encryption.
• Client workspace data is isolated per workspace using row-level security policies. One client's data cannot be accessed from another client's workspace.
• Access to data is controlled through authentication and role-based seat permissions.

Data Retention & Deletion

Google Drive: Drive files you import may be stored as documents, extracted text, metadata, embeddings, and processing records so they remain available in the workspace until deleted. Disconnecting Google stops future access. Previously imported or generated workspace content remains under your normal deletion controls unless you delete it or delete your account.

Gmail: Gmail data is fetched on demand when a user initiates a search or reads a thread. Raw mailbox data is not stored as a mailbox copy. However, if a user asks Client Intelligence to process, summarize, or act on email content, excerpts, summaries, or derived outputs may be saved as part of chat history or workspace content.

Google Calendar: Calendar event data may be stored as workspace calendar records to support delivery-memory, meeting context, and private-room features within client workspaces.

Account data generally: Data is retained for as long as the account is active. When an account is deleted, personal data and content are deleted within 30 days, except where retention is required by applicable law. Financial records are retained for 7 years in accordance with standard recordkeeping obligations.

Deletion requests: To request deletion of your account or connected-app data, email assistant@joshforti.com. We process deletion requests within 30 days, except where retention is required by law, security, fraud prevention, or financial recordkeeping obligations.

Limited Use statement:

Client Intelligence's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide or improve user-facing features you request, and we do not sell Google user data, use it for advertising, or use it for unrelated purposes.

How to revoke access:

You can disconnect each Google integration at any time from Settings > Integrations in Client Intelligence. You can also revoke access directly from your Google account at myaccount.google.com/permissions. To delete imported Google content, delete the relevant workspace documents, calendar records, chat history, workspace, or account, or contact support for help.

10. Cookies

We use essential cookies to maintain your login session. We do not use advertising or tracking cookies. Our analytics, if any, are aggregated and anonymized.

11. Children

Client Intelligence is not intended for users under 18. We do not knowingly collect personal information from minors.

12. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or a notice in the app. Continued use after notice constitutes acceptance.

13. Contact

Client Intelligence LLC
assistant@joshforti.com