Privacy Policy

Exposql Checklist is a product of Exposql AI Labs (the "Company", "we", "us"). We provide a compliance checklist and document studio for software businesses. This policy explains what personal data we collect, how we use it, and the rights you have. For any privacy question, contact us at privacy@exposql.ai.

We collect the following categories of data.

• Account details. When you sign in with Google we receive your name, email address and profile image from your Google account.
• Workspace content. The documents, drafts, form inputs, brand assets and settings you create inside the product.
• AI inputs and outputs. The text you submit to AI features and the responses generated for you.
• Payment information. When you purchase a plan or credits, payment is processed by Stripe. We receive confirmation and billing metadata but never see or store your full card number.
• Usage and device data. Pages viewed, actions taken, IP address, browser and device type, used to operate and improve the service.

• To provide and operate the service and your workspace.
• To generate documents and power AI features you choose to use.
• To process payments and manage your subscription and credits.
• To send you service related communications and respond to support requests.
• To detect, prevent and address abuse, fraud and security issues.
• To meet our legal and regulatory obligations.

When you use AI features, your inputs are sent to our AI provider, Anthropic (Claude), under enterprise terms. Anthropic does not use your inputs to train its foundation models. We store your prompts and outputs in your workspace so you can review them, and you can delete them at any time. AI outputs are generated probabilistically, may contain errors, and do not constitute legal or other professional advice.

We share data only with the service providers needed to run the product, each bound by their own data protection obligations.

• Google. Sign in and identity.
• Stripe. Payment processing.
• Anthropic. AI generation and editing.
• Neon. Database hosting for your account and content.
• Vercel. Application hosting and content delivery.

We do not sell your personal data. We do not share it for cross context behavioural advertising.

We retain your personal data for as long as your account is active. On account closure we delete or anonymise your personal data within 30 days, unless a longer period is required by law (for example, retaining invoices for tax purposes).

Our providers may process data in countries including the United States. Where personal data is transferred outside your region, we rely on the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, and similar safeguards.

Depending on where you live you may have rights to access, correct, delete, export or restrict the processing of your personal data, and to object to certain processing. Residents of the EU and UK have rights under the GDPR and UK GDPR. California residents have rights under the CCPA as amended by CPRA, including the right to opt out of sale or sharing (we do neither). Residents of India have rights under the Digital Personal Data Protection Act 2023. To exercise any right, email privacy@exposql.ai and we will respond within the timeframe required by applicable law.

We use strictly necessary cookies to keep you signed in and to operate the service. We use limited analytics to understand usage in aggregate. We do not use advertising cookies. You can control cookies through your browser settings.

We use industry standard measures to protect your data, including encryption in transit, access controls and reputable infrastructure providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

The service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal data from children.

We may update this policy from time to time. We will post the updated version at this URL and revise the date above. Material changes will be communicated by email where appropriate.

Questions or requests about this policy or your data can be sent to privacy@exposql.ai.