Privacy Policy

What we collect

When you submit a PRD for analysis, we process the document text you provide, your account email, and organization name. We do not require or request any personal data beyond what's needed to run and bill the service.

How your PRD content is used

Your PRD text is sent to our analysis pipeline (a fixed sequence of automated checks) and is not used to train any model. We store:

• An append-only log of each run (the PRD text and the resulting gap register).
• Short text snippets of individual findings, converted to vector embeddings, so we can detect recurring gap patterns across your runs and surface candidates for your organization's ontology. These snippets are not shared outside your organization.

Third parties

PRD text is passed to a language-model provider to generate the analysis. We select and may change providers as our infrastructure evolves; whichever provider is active only receives the minimum text needed to produce a verdict, and does not receive your account or billing details.

Retention

Run history is retained for as long as your account is active so you can review past analyses. You can request deletion of your account and associated run history at any time by contacting us.

Your rights

You can request a copy of your stored data, or its deletion, by contacting us at privacy@airtight.site.

Changes

We'll update the date above when this policy changes and, for material changes, notify account holders by email.