Privacy Policy for Exmergo Viz

1. Introduction

This Privacy Policy describes how Exmergo, Inc. ("we," "us," or "our") collects, uses, and shares information in connection with your use of our data visualization application, Exmergo Viz (the "Service"). Your privacy is a top priority, and this policy outlines our commitment to protecting your data and your rights regarding that information.

2. Information We Collect

Exmergo, Inc. collects information in three main categories when you use Exmergo Viz:

• A. Information You Provide Directly

  • Account Information: When you create an account via Google or Microsoft, we receive information from your chosen provider, such as your name, email address, and profile picture. We store this along with your Exmergo Viz account settings, such as your pricing tier. For guest users, we create an anonymous account and may use a temporary migration key to link your work if you decide to sign up.
  • Uploaded Data: We collect the data files (e.g., CSV, XLSX, JSON, Parquet) you upload to an Exmergo Viz session for analysis and visualization.
  • User Prompts: We collect the text-based questions and commands you enter into the chat interface to interact with our AI agents within the Service.

• B. Information Generated During Your Use of the Service

  • AI-Generated Content: This includes the queries and visualization code generated by our AI agents in response to your prompts within Exmergo Viz.
  • Dashboard & Session Data: We store the configuration of your Exmergo Viz dashboards, including the arrangement of charts, their titles, sizes, and positions. We also store the history of your conversations with the AI for each session.

• C. Information We Collect Automatically

  • Usage and Analytics Data: When you use our Service, Exmergo, Inc. uses Google Analytics to automatically collect information about your interaction. This data helps us understand user behavior and improve Exmergo Viz. Information collected includes:
    • Device and browser type, operating system, and screen resolution.
    • General geographic location (e.g., country and city).
    • User acquisition source (how you arrived at our site).
    • User engagement metrics such as pages visited, session duration, and interactions with features.
    • A randomly-generated client ID stored in a cookie to distinguish users across sessions.
  • Log Data: Our servers automatically log technical information for security and debugging, which may include your IP address, request details, and timestamps.

3. How We Use Your Information

Exmergo, Inc. uses your information for the following purposes:

• To Provide and Maintain the Service: To authenticate you, process your uploaded data, execute queries, generate visualizations, and save your dashboards within Exmergo Viz.
• To Improve Our AI Models and Service: We analyze usage data in an aggregated and anonymized form to understand user behavior and identify popular features to optimize the Exmergo Viz user experience for all users. For users on a free plan, we may also use your conversational prompts, data schema, and data samples to train and refine the performance of our AI agents. If you are a user on a paid subscription plan, your data, prompts, and schema will not be used to train our AI models.
• For Security and Debugging: To monitor for malicious activity, prevent abuse, and troubleshoot technical issues with the Service.
• To Communicate With You: To send you information about your account or our Service.

4. How We Handle Your Data: A Technical Deep-Dive

At Exmergo, Inc., we have architected Exmergo Viz with your privacy as a core design principle. It is critical to understand how different pieces of your data are handled.

• Your Uploaded Data Files:

  • Storage: Your raw data files are converted to the efficient Apache Parquet format and stored privately and securely on Google Cloud Platform.
  • Segregation: Each file is stored in a path that is unique to your user ID and session ID within Exmergo Viz. This ensures your data is strictly segregated and not co-mingled with other users' data.
  • Querying: Our Data Engine queries your files directly from their secure location on Google Cloud Platform.

• Your Interactions with Our AI Agents:

  • We DO NOT send your raw data file to our third-party AI partners (e.g., Google Gemini).
  • To generate relevant queries and visualizations in Exmergo Viz, our AI agents are sent a limited, specific subset of information:
    1. Your conversational prompt (e.g., "Show me sales by region").
    2. The conversation history within that session.
    3. The schema of your data (column names and data types).
    4. A random sample of rows from your data to help the AI understand the data's structure and content when generating a visualization.
    5. Aggregated results from your data to help the AI conduct analysis and identify patterns when generating insights.
  • This privacy-preserving approach allows the AI to perform its function without having access to your complete dataset.

• Published & Shared Dashboards:

  • When you choose to publish a dashboard from Exmergo Viz, we create a read-only, public snapshot.
  • This process DOES NOT make your original uploaded data file public.
  • Instead, our Data Engine re-runs the specific queries associated with the visualizations on your dashboard and saves only the final results of those queries to a new, public location.
  • Anyone with the shareable link can view the visualizations powered by these saved results, but they cannot access, query, or download your original underlying dataset.

5. Data Sharing and Third Parties

Exmergo, Inc. does not sell your personal data. We only share information with the following third-party service providers (sub-processors) as necessary to provide our Service:

• Cloud Infrastructure Provider (Google Cloud Platform): We use GCP to host our services, store your data, and manage our application database.
• AI Service Providers (e.g., Google): As detailed above, we send conversational prompts, data schemas, and data samples to our AI partners to power the core functionality of Exmergo Viz.
• Authentication Providers (Google, Microsoft): When you sign in using a social provider, you are authenticating directly with them. We only receive basic profile information upon successful authentication.
• Analytics Providers: We share usage data with Google Analytics to help us analyze and improve the Service. Google's use of this data is governed by its own Privacy Policy.

Exmergo, Inc. may also disclose information if required by law or in connection with a major business transaction, such as a merger or acquisition.

6. Data Security & Retention

Exmergo, Inc. implements industry-standard security measures, including encryption in transit (HTTPS) and at rest, and leverages the robust security infrastructure of Google Cloud Platform. Your data is logically segregated to prevent unauthorized access.

We retain your data for as long as your account is active. You can delete the files you have uploaded within Exmergo Viz, and that permanently deletes the files from our system.

7. Your Privacy Rights

Depending on your location and subject to applicable law, you may have certain rights regarding your personal information. These rights may include:

• The right to access: You can request a copy of the personal information we hold about you.
• The right to rectification: You can request that we correct any inaccurate or incomplete personal information.
• The right to erasure (or "to be forgotten"): You can request that we delete your personal information, subject to certain legal limitations.
• The right to data portability: You can request that we provide you with a copy of your personal information in a structured, commonly used, and machine-readable format.
• The right to restrict processing: You can request that we limit how we use your personal information.

You can manage your dashboards and associated data directly from within the Exmergo Viz application, including renaming and deletion. For any other requests to exercise your rights, please contact us at the email address provided in the "Contact Us" section. We will respond to your request in accordance with applicable law.

8. International Data Transfers

Our services are hosted and operated in the United States. To provide the Service, we may process and store your information in the U.S. and other countries. Data storage locations depend on your subscription plan:

• For users on a Free or Individual plan: All of your data, including uploaded files and account information, is processed and stored on servers located in the United States. If you reside outside the U.S., please be aware that your personal information will be transferred to, stored, and processed in the United States, which may have different data protection laws than your country of residence.
• For Enterprise clients: Our enterprise solutions provide the option to select a specific geographic location (e.g., within the European Union) for data storage and processing to meet your corporate and regulatory needs. Please refer to your enterprise agreement for specific details.

9. Children's Privacy

Our Service is not directed to individuals under the age of 16, and we do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child under 16, we will take steps to delete such information promptly. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at the email address provided below.

10. Cookies and Tracking Technologies

We use cookies (small text files stored on your device) and similar technologies to operate the Service. Specifically, we use first-party cookies through Google Analytics to uniquely identify your browser session and track your interactions on our site. You can manage cookie preferences through your browser settings.

10. Your Choices and Opt-Out

You can opt out of Google Analytics data collection by installing the Google Analytics Opt-out Browser Add-on.

11. Governing Law

This Privacy Policy and any disputes related thereto shall be governed by and construed in accordance with the laws of the State of Delaware in the United States of America, without regard to its conflict of law provisions.

12. Changes to This Privacy Statement

Exmergo, Inc. may update this Privacy Statement from time to time. We will notify you of any significant changes by posting the new policy on our website or through the Service.

13. Contact Us

If you have any questions or concerns about this Privacy Statement or our data practices, please contact Exmergo, Inc. at: support@exmergo.com