Privacy Policy

1Who we are

Assuria.ai (“Assuria”, “we”, “us”) provides an AI research assistant for accountants and tax professionals. Our users are accounting firms and their staff, who use Assuria to search their own documents and connected tools and to obtain source-cited answers to tax and accounting questions.

This policy explains what data we handle, why, and what we will never do with it. It applies to assuria.ai and all associated services.

2The short version

• We access only the data needed to answer your questions, and only after you explicitly connect an account.
• We never use your data — or your clients’ data — to train any AI model. Not ours, not anyone else’s.
• We never sell your data, and never use it for advertising of any kind.
• Each firm’s data is isolated from every other firm’s.
• You can disconnect an account or delete your data at any time.

3Information we collect

Account information

When you create an account we collect your name, email address and, if you sign in with Google, your Google account identifier and profile email. We use this only to authenticate you and to operate your subscription.

Content you provide

Documents you upload, questions you ask, and records you create in the product (clients, notes, tasks). This content is stored so the assistant can search it and so your work persists between sessions.

Data from services you connect

If — and only if — you choose to connect a third-party account, we access data from it on your behalf. Connections are optional; the product works without them, and you may disconnect at any time.

4Google Workspace data

Where you connect a Google account, Assuria requests the following access. We request the narrowest permissions that allow the feature to work.

Limited Use disclosure

Assuria’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, and without qualification:

• We use Google user data only to provide and improve the features you can see in the product — searching, summarising, and answering questions about your own data.
• We do not use Google user data to develop, train, or improve any generalised artificial intelligence or machine learning model. Your email and documents are used to answer your questions and for nothing else.
• We do not transfer Google user data to third parties except as set out in section 6.
• We never use Google user data for advertising, retargeting, or profiling.
• We do not permit humans to read your Google user data, except: where you have given us specific affirmative permission (for example, sending us a message to debug a problem); where it is necessary for security purposes such as investigating abuse; to comply with applicable law; or where the data has been aggregated and anonymised.

5How your data is used

When you ask a question, Assuria retrieves the passages relevant to it — from documents you uploaded, and from connected services where your question calls for it — and supplies them to a language model along with your question, so it can compose an answer that cites its sources.

Producing an answer requires sending the relevant excerpts to a language model provider. We send the minimum content needed to answer, we contract with providers who are prohibited from training on it, and we do not permit its retention beyond the time needed to return an answer.

We also use aggregate, non-identifying usage statistics — such as how many questions were asked — to operate and improve the service.

6Who we share data with

We do not sell your data and we do not share it for advertising. We use a small number of service providers who process data strictly on our instructions:

We may also disclose data where required by law, or to protect the rights and safety of our users. If we are ever compelled to disclose your data, we will tell you unless legally prohibited from doing so.

7Storage, security and isolation

• Data is encrypted in transit (TLS) and at rest.
• Credentials for connected accounts are stored encrypted and are never exposed to your browser.
• Each firm’s data is isolated. One customer’s documents, conversations and connected accounts are never accessible to another.
• Access to production systems is restricted to authorised personnel and is logged.
• Data is stored in the United States.

8Retention and deletion

We keep your data for as long as your account is active. You control it directly:

• Disconnect a service at any time from the Connections page. We stop accessing it immediately and delete the stored credentials.
• Delete a document and both the file and its search index entries are removed.
• Delete your account by writing to support@assuria.ai. We erase your content within 30 days, other than what we must retain for legal or accounting obligations.
• You may also revoke Assuria’s access to your Google account at any time at myaccount.google.com/permissions.

9Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to certain processing. Write to support@assuria.ai and we will respond within 30 days.

Assuria is a tool used by accounting professionals who owe their own duties of confidentiality to their clients. Where a firm uses Assuria to process information about their clients, the firm is the controller of that information and we act as their processor.

10Children

Assuria is a professional tool and is not directed at anyone under 18.

11Changes to this policy

If we make a material change we will update the date at the top of this page and notify account holders by email before the change takes effect. We will not retroactively reduce your rights over data already collected without your consent.

12Contact

Questions, requests, or anything that looks wrong: support@assuria.ai.

Assuria.ai
3257 Pennsylvania Ave NW Suite 1135
Washington, DC 20006