Privacy Policy

1. 1. Information We Collect

We collect information you provide directly, information generated through your use of the Service, and limited technical information collected automatically.

• Account information: name, email address, and authentication data managed through Amazon Cognito, including MFA enrollment status if you enable it
• Order information: report selections, quote details, order history, and billing metadata (payment card details themselves are handled solely by Stripe and are not stored by us)
• Diagnostic and intake answers: responses to questionnaires, briefs, or intake forms you complete to scope your report
• Uploaded files: documents and data files (e.g., PDF, CSV, XLSX, DOCX, TXT, JSON) you choose to upload for use in your report
• Usage and analytics data: first-party, privacy-conscious analytics about how you interact with our website and dashboard (we do not use third-party advertising trackers)
• Support communications: messages you send to our support, privacy, or legal contact addresses

2. 2. How We Use Information

We use the information we collect to: create and manage your account; process orders and payments; generate, quality-check, and deliver your reports; provide customer support; maintain the security and integrity of the Service; improve our products and pipeline (using aggregated or de-identified data where feasible); and comply with legal obligations.

3. 3. AI Processing of Your Information

To produce your report, your diagnostic answers, order details, and any files you upload are processed by AI models and related infrastructure operating on Amazon Web Services (AWS) in the United States, including models accessed through Amazon Bedrock.

We do not use your uploaded files or the diagnostic answers you provide to train, fine-tune, or improve underlying third-party AI models. Your inputs are used solely to produce your requested report and to operate, support, and secure the Service.

4. 4. How We Share Information

We do not sell your personal information. We share information only as described below.

• Service providers: infrastructure and processing providers, including Amazon Web Services (hosting, storage, and AI processing) and Stripe (payment processing); we may also use email delivery providers to send transactional and account-related emails
• Legal and safety: where required to comply with law, legal process, or governmental request, or to protect the rights, property, or safety of Princeton Analytica, our customers, or others
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections
• With your consent: any other sharing you direct or approve

5. 5. Security

We implement administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and at rest, private storage with access controls, and least-privilege access to internal systems. Additional detail is available on our Security page.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. 6. Data Retention

We retain information for as long as necessary to provide the Service and for legitimate business or legal purposes, as summarized below.

• Raw customer uploads: retained by default for 90 days after upload, then automatically deleted
• Intermediate research artifacts generated during report production: retained by default for 180 days, then automatically deleted
• Generated reports: retained in your account library for as long as your account remains active, or until you request deletion
• Account and order records: retained as needed to operate your account and to comply with tax, accounting, and legal obligations

7. 7. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. We honor these rights for all customers as a matter of policy, including customers located in jurisdictions with data protection frameworks such as the California Consumer Privacy Act (CCPA) or the EU/UK General Data Protection Regulation (GDPR), to the extent applicable to us.

You can request deletion of your uploaded files or account data, or request a copy of your data, at any time by emailing privacy@princetonanalytica.com. We will respond within a reasonable time and verify your identity before fulfilling the request.

8. 8. Cookies and Similar Technologies

We use essential cookies necessary for the website and dashboard to function (such as authentication session cookies) and first-party analytics technologies to understand aggregate usage of our Service. We do not use third-party advertising cookies or cross-site ad trackers.

You can control cookies through your browser settings; disabling essential cookies may prevent parts of the Service, such as login, from working correctly.

9. 9. Children's Privacy

The Service is intended for business use by individuals 18 years of age or older and is not directed to children. We do not knowingly collect personal information from children under 18. If you believe a child has provided us information, contact privacy@princetonanalytica.com and we will take appropriate steps to delete it.

10. 10. International Data Transfers

Our infrastructure is hosted in the United States (AWS region us-east-1). If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, which may have data protection laws different from those in your jurisdiction. We take steps designed to ensure your information continues to be protected consistent with this policy wherever it is processed.

11. 11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Effective Date" above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

12. 12. Contact Us

For privacy-related questions or requests, contact privacy@princetonanalytica.com. For general support, contact support@princetonanalytica.com. For legal notices, contact legal@princetonanalytica.com.