Privacy Policy

1. Who we are

Additional provides a collaborative, AI-native workspace for teams. In this policy, "Additional", "we", "us", and "our" refer to the company that operates the Additional service. "You" refers to the person or organization using it. If you have questions, you can reach us at privacy@additional.app.

2. Information we collect

We collect the information we need to run the service, keep it secure, and improve it. This includes:

• Account information, such as your name, email address, and the workspace details you provide when you sign up.
• Content you create, such as prompts, messages, files, and sessions inside a workspace.
• Connected tools, meaning data we read from integrations you authorize, limited to what those tools allow and the permissions you grant.
• Usage and device data, such as log data, approximate location from your IP address, browser type, and how you interact with the service.
• Communications, such as the messages you send to our support or sales teams.

3. How we use information

We use the information above to:

• Provide, maintain, and secure the service.
• Authenticate you and manage your workspace and access.
• Operate the features you request, including AI responses and integrations.
• Monitor, prevent, and investigate fraud, abuse, and security incidents.
• Analyze usage so we can fix issues and improve the product.
• Communicate with you about updates, security, and support.
• Comply with legal obligations and enforce our terms.

4. AI models and your content

Your content and prompts are not used to train our models or those of our model providers. Where the service uses third-party model providers to generate responses, we rely on enterprise terms and zero-data-retention agreements where available. AI output can be inaccurate or incomplete, so you remain responsible for reviewing it before you rely on it.

5. Legal bases for processing

Where the GDPR or similar laws apply, we process personal data on the following legal bases: to perform our contract with you, to pursue our legitimate interests in running and securing the service, to comply with our legal obligations, and with your consent where it is required. You can withdraw consent at any time.

6. How we share information

We do not sell your personal information. We share it only as described here:

• Service providers who host, support, and help us run the service, under contracts that limit how they use your data.
• Model providers that generate AI responses, subject to the protections described above.
• Legal and safety reasons, when we believe disclosure is required by law or needed to protect rights, safety, or the integrity of the service.
• Business transfers, if we are involved in a merger, acquisition, or sale of assets, in which case we will notify you of any change.
• Your own workspace, where the people you invite can see the shared sessions, context, and content in that workspace.

7. Data retention

We keep personal data for as long as your account is active and for as long as we need it to provide the service, comply with our legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymize it. You can ask us to delete your account and its content, subject to any legal retention requirements.

8. Security

We use technical and organizational measures designed to protect your data, including encryption in transit and at rest, workspace isolation, access controls, and logging. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. International transfers

We host data in the European Union by default. If we transfer personal data to other countries, we use safeguards recognized under applicable law, such as standard contractual clauses, to protect it.

10. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct data that is inaccurate or incomplete.
• Delete your data or ask us to restrict how we use it.
• Object to certain processing, including direct marketing.
• Receive a copy of your data in a portable format.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at privacy@additional.app. We will respond within the time required by law.

11. Cookies and analytics

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the service is used. You can control cookies through your browser settings. Some features may not work properly if you disable them.

12. Children

The service is not intended for children under the age of 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you. Your continued use of the service after an update means you accept the revised policy.

14. Contact us

If you have questions about this policy or how we handle your data, contact us at privacy@additional.app.