Privacy Policy
DRAFT — pending attorney review. Do not publish as-is.
Last updated: [DATE]
This policy explains how DIGIT4L STUDIO DESIGN LLC ("we," "us") handles information when you use Sabelix (the "Service").
Our promise, in plain words
- Your documents are yours. Nobody on our team opens or reads them.
- They're encrypted, both while they travel and while they're stored, each account with its own key.
- They're only decrypted automatically, by our system, at the moment you use the Service — to read a document you upload or to answer a question you ask — and only in temporary memory.
- We never use your documents to train AI, and we never sell or share them for advertising.
- You can delete everything, anytime, with one click.
The rest of this policy explains the details.
1. What we collect
| Type | Examples | Why |
|---|---|---|
| Account information | Name, email, business name | To create and secure your account and contact you about it |
| Your Content | Documents you upload, the text and figures extracted from them, your questions and the answers | Only to provide the Service to you |
| Payment information | Plan, billing status. Card details are collected and stored by Stripe, not by us | To charge for paid plans |
| Usage information | Number of documents and questions, features used, device and browser type, approximate location from IP | To enforce plan limits, keep the Service secure and improve it. This never includes the content of your documents or questions. |
| Cookies | Essential cookies for login; optional analytics cookies only if you accept them | To keep you signed in and understand usage |
2. How your documents are protected
- Encryption in transit: all connections use TLS (HTTPS).
- Encryption at rest: your files, the text extracted from them, your chat history and the search data derived from them are encrypted with a key unique to your account. Those keys are held in a dedicated key-management service, separately from the data.
- No human access: our team members are not given permission to decrypt customer content. Our internal tools show account and usage information only — never document content. Every access to keys is logged.
- Support with your permission only: if you ask for help with a specific document, we will ask you to grant temporary access from your settings. That access expires automatically, and you can revoke it at any time.
- Sensitive data masking: when we detect Social Security numbers, full card numbers or bank account numbers, we mask them before analysis.
What this means — honestly: to read your documents and answer your questions, our system must decrypt them for a moment, automatically. That is why we say "nobody on our team can see them," not "it is technically impossible for any computer to read them." No online service that analyzes documents with AI can truthfully promise the second.
3. AI providers
To understand your documents and write answers, the Service sends the relevant excerpts to AI model providers (currently [PROVIDER(S)]). Under our agreements with them:
- They process the data only to return the answer to us;
- They do not use it to train their models; and
- They do not keep it beyond [ZERO / X DAYS — confirm with each provider's terms].
4. Who else receives data (subprocessors)
We use a small number of service providers, each bound by contract to protect your data and use it only for us:
| Provider | Purpose |
|---|---|
| [HOSTING / DATABASE, e.g., Supabase] | Encrypted storage and database |
| [AI PROVIDER(S)] | Reading documents and generating answers |
| Stripe | Payments |
| [EMAIL PROVIDER] | Account emails |
We will update this list before adding a new provider that handles Your Content.
We do not sell your personal information and we do not share it for targeted advertising.
5. Legal requests
We may disclose information if required by a valid legal process (such as a subpoena or court order). Where the law allows, we will notify you first so you can object.
6. How long we keep data
- Your Content: for as long as your account is active, or until you delete it.
- When you delete a document or your account: we remove it from active systems immediately and from backups within [35] days. Because each account has its own key, we also destroy that key, which makes any remaining encrypted copy unreadable.
- Billing records: as long as tax and accounting law requires.
7. Your rights
Wherever you live in the U.S., you can:
- Access or download your data;
- Correct your account information;
- Delete your data or account;
- Opt out of optional analytics cookies.
Residents of California and other states with privacy laws may have additional rights, and we honor them. To exercise any right, use your account settings or write to [email protected]. We won't treat you differently for exercising your rights.
8. Security incidents
No system is perfectly secure. If a security incident affects your information, we will notify you and the authorities as required by law, without undue delay.
9. Children
The Service is for businesses and people 18 and older. We do not knowingly collect information from children.
10. Changes
If we make material changes to this policy, we will notify you by email or in the app before they take effect.
11. Languages
This policy is available in English and Spanish. If there is any conflict between versions, the English version controls.
12. Contact
DIGIT4L STUDIO DESIGN LLC · 18117 Biscayne Blvd, Suite #4882, Miami, FL 33160 · [email protected]