Privacy Policy

Effective date: January 1, 2026

Automate 48 (“we,” “us,” or “our”) operates the automate48.ai website and related products including AI Compliance Hub (comply.automate48.ai). This policy describes how we collect, use, and protect your information when you use our services.

Information We Collect

We collect information you provide directly, such as:

• Name and email address when you contact us, subscribe to a newsletter, or create an account
• Billing information processed through Stripe for paid subscriptions
• Business information you enter when using AI Compliance Hub
• Communications you send to us via email or contact forms

We also collect limited technical data automatically, including IP address, browser type, pages visited, and referral source, using standard web analytics.

How We Use Your Information

• To deliver and operate the services you have subscribed to
• To process payments and manage your subscription
• To send transactional emails related to your account or purchase
• To respond to inquiries and provide support
• To improve our products and understand how they are used

AI Compliance Hub — Customer Data

AI Compliance Hub is designed with a zero-storage principle for compliance content. Documents, assessments, and artifacts you generate within the application are processed client-side or in-memory and are not stored on our servers. Workspace data you choose to export is saved only to your own device.

Third-Party Services

We use the following third-party processors:

• Stripe — payment processing and subscription management
• SendGrid — transactional email delivery
• Anthropic — AI language model processing for AI Compliance Hub
• Cloudflare — infrastructure, CDN, and edge security
• Google — OAuth authentication

Each processor is governed by their own privacy policy and data processing terms.

Data Retention

Account data is retained for the duration of your subscription and for up to 90 days following termination. Stripe retains billing records in accordance with their own retention policies. You may request deletion of your account data by contacting [email protected].

Security

We implement technical and organizational controls appropriate to the sensitivity of the data we process, including encryption in transit (TLS), access controls, and secrets management practices aligned with industry standards. No transmission over the internet is 100% secure; we cannot guarantee absolute security.

Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us at [email protected]. If you are located in the EEA, UK, or California, additional rights may apply under GDPR, UK GDPR, or CCPA respectively.

Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by updating the effective date above and, where appropriate, by email notification. Continued use of our services after changes take effect constitutes acceptance of the revised policy.

Contact

Questions about this policy may be directed to:
Automate 48 — [email protected]