Artificial Advantage
Book a demo

Privacy Policy

Effective date: September 29, 2026

Artificial Advantage LLC (“we”, “us”) provides Artificial Advantage Cloud (the “Service”): AI workers that carry out the tasks you describe, on remote computers, in the websites and applications you use, with a concierge you talk to. This policy explains what we collect, why, who else handles it, how long we keep it, and what you can do about it. It covers the Service and our website. “Your data” means everything described in section 1.

1. What we collect

Account information. Your name and email address, your organization, and the details you or your admins enter under Settings: a title and phone numbers for you; your business’s legal name, addresses, phone, fax, email, website, tax ID and time zone, which workers use to fill forms. We create accounts and users ourselves; there is no self sign-up. Sign-in passwords are held by our identity provider, which emails each new user a temporary password. We bill by invoice; if you pay by card or bank transfer, your payment details go to the payment processor named on the invoice, and we do not store card numbers.

What you give the concierge. The tasks you describe, your messages, your answers to workers’ questions, your approvals and refusals, the files you attach (for example insurance applications, loss runs, spreadsheets, documents and emails), and the standard operating procedures, skills and templates you add. Files often contain information about other people: names, Social Security numbers, dates of birth, driver’s license numbers, bank details, and sometimes medical notes in claims records. Section 8 says what that means.

Saved logins. Usernames and passwords for third-party sites that you choose to save so workers can sign in on your behalf, and, if you add one, the secret of an authenticator app for two-factor codes. Passwords and authenticator secrets are encrypted at rest under a key of your account’s own. A worker never sees a password: it types a handle that the system replaces with the password at the moment of typing. Two-factor codes are generated by the system at the moment a site asks for one.

Connected mailboxes. If you connect your Microsoft mailbox, we hold the token that lets the Service read it and send from it, encrypted like a password. The mailbox is used for three things: to attach an email to a request; to send email in your name when a worker needs to; and, if you set up a trigger, to read new mail. With a live trigger, the Service checks the inbox every minute, and every new message is read and judged by the model against your trigger’s description. Only messages that match are kept, as the start of a task, with their attachments. Setting up a trigger also tests it against recent mail. You or an admin can disconnect the mailbox at any time. Accounts with no connected mailbox send email from an address of ours.

Worker activity. To do your tasks, workers see and act on screens of the sites you direct them to. We keep a record of each worker’s steps: screenshots, the actions taken, what the worker read from your files, and what it wrote and reported. This record is how you audit what was done and how we support you.

Permission settings. Your rules for what workers may do without asking and how careful they must be on each site, and your decisions on the actions held for you.

Technical and usage data. Logs of requests, errors and performance, with identifiers that let us trace a problem; your IP address and browser type; when you used the Service; an operations log for your account of what happened (failed calls to our providers in their words, the actions users took, and each task’s ending with its cost), which holds no message text; and a record of every action our own operators take on your account through our administrative console.

When you contact us. Your name, your contact details, and what you write or say when you ask for a demo, write to us or talk with us.

Cookies. One session cookie that keeps you signed in for thirty days from your last use, and one short-lived cookie during sign-in. No analytics or advertising cookies and no third-party scripts. Our website serves its own fonts and fetches nothing from anyone else while you read it.

2. What we use it for

We use your data to provide, operate, secure, support and improve the Service, and for nothing else. That means: to understand your tasks and dispatch workers; to sign in to the sites you direct them to and read the files you attach; to sort each action a worker proposes under your permission settings, so that it runs, waits for your approval, or is refused; to show you what was done; to detect abuse; to support you and fix problems, which includes reading task records; to bill you and communicate about your account; and to improve how workers are instructed.

We do not train or fine-tune AI models on your data. We do not sell it. We do not share it for anyone else’s purposes. Information that no longer identifies you or your clients may be kept and used.

3. Who else handles your data

The providers the Service runs on. They process your data for us, each under terms that keep it confidential and limit its use to providing its service to us. By category:

  • AI model providers. Tasks, messages, file contents, screenshots and worker instructions go to the model to decide what to do next. Passwords and authenticator secrets never do. A two-factor code may be seen by the worker when it is entered. No model provider we use trains AI models on your data.
  • Cloud infrastructure, where the Service runs and your records are stored, encrypted.
  • Remote desktops, one for each piece of work. The files a worker may see are copied onto it and destroyed with it. When you watch a worker’s screen, your browser connects to the desktop provider directly to show it.
  • Sign-in, the identity provider that holds sign-in passwords.
  • Email delivery, for accounts with no connected mailbox.

The current providers, with what each does and where, are listed in our document “Security, AI and your data”. We keep that list current.

Payment processing. If you pay an invoice by card or bank transfer, the processor named on the invoice handles your payment details.

Our business tools. The email, customer-relationship and communication tools we run our company on hold your contact details and our correspondence with you.

Third-party sites you direct workers to. When a worker signs in to a site with your saved login and acts there, that site receives what any user of it would: the sign-in, the actions, and the data entered or uploaded. Those sites have their own privacy terms. We do not control them.

Your connected mailbox stays in your own Microsoft account. We hold only the token to read it and send from it.

We disclose information when the law requires it, to protect the rights and safety of people, or in a merger, acquisition or sale of assets, in which case this policy continues to apply to the transferred data.

4. Where data is processed

The Service stores your data in the United States. Where each provider the Service runs on processes it is in “Security, AI and your data”.

5. How long we keep it

Your data stays for as long as your account exists. What you gave the Service and what workers produced for you, any of it or all of it, is deleted within thirty days of your asking, and closing your account is asking (section 7). Around it:

  • server logs: thirty days;
  • database backups: fourteen days, after which deleted data is gone from them too;
  • earlier versions of files: ninety days;
  • a remote desktop and everything on it: destroyed when the work ends or after a short time without activity; the current limits are in “Security, AI and your data”;
  • model providers: inputs and outputs kept only briefly; the current period is in “Security, AI and your data”;
  • billing records: as long as tax and accounting law requires.

If your subscription ends and you do not ask for deletion, your data waits for you to come back or to ask. After two years without use we may delete an account after emailing you. Through all of this we keep what law requires us to keep, what a live dispute needs, our own records of the account (the record of our operators’ actions, our correspondence with you, billing records), and information that no longer identifies you or your clients.

6. How we protect it

Everything travels encrypted: the Service is HTTPS only, and connections to the database, the file store, the desktops and every provider use TLS. Everything rests encrypted: the database, the file store and the backups. Each account’s saved passwords, authenticator secrets and mailbox tokens are encrypted under a key of that account’s own, never stored in the clear. Before a worker acts, the Service sorts the action under your permission settings: it runs, waits for your approval, or is refused. The sorting is automatic and can be wrong, so it reduces the risk of an unwanted action and does not remove it. Access to your data is limited to Artificial Advantage staff and contractors who need it to provide, support or improve the Service, under confidentiality obligations; everyone with access has signed our personnel security policy, and every action our operators take on your account through our administrative console is recorded. Our document “Security, AI and your data” describes the rest.

People at Artificial Advantage see your data only when providing, supporting or improving the Service requires it, for example to investigate a problem you report or a task that failed.

No system is perfectly secure. If a breach affects your data, we will tell you without undue delay, and in any case within 72 hours of confirming it.

7. Your choices and rights

Within the Service you can remove saved logins and authenticator secrets, disconnect a mailbox, delete standard operating procedures, skills, templates and triggers, and change your permission settings. For anything else, a conversation with the tasks, files and records it produced, a file you uploaded, a copy of your account’s data, or the closing of your account, write to hello@artificialadvantage.com and we do it within thirty days. You can ask us what personal information we hold about you and have it corrected. Depending on where you live, you may have further rights under law over your personal information, such as to have it deleted; write to us and we will respond within the time the law allows. You may also complain to your state’s attorney general or privacy regulator.

If you use the Service through your organization’s account, your organization is our customer and decides who is an admin. Admins can see everything done on the account, including your conversations and files, and can act on your tasks. Your name is shown on what you make. A mailbox you connect is used only for your work. Questions about how your organization uses your data go to your organization.

8. People whose data you enter

Your tasks and files may contain information about other people: applicants, insureds, employees, claimants. You are responsible for having the right to use that information with the Service. We process it only for the purposes in section 2, as your service provider, and this policy governs how we handle it. Health information beyond what appears in insurance applications and claims records, or anything that would make us a business associate under HIPAA, needs our agreement first.

9. Children

The Service is for business use by adults, and we do not knowingly create an account for anyone under 18. Records you handle may hold information about minors, such as household members on a policy; section 8 covers them.

10. Changes

We may change this policy. The current version is the one published at www.artificialadvantage.com/privacy; for material changes, we tell you by email or in the Service at least thirty days before they take effect.

11. Contact

Artificial Advantage LLC
548 Market St #427566, San Francisco, CA 94104
hello@artificialadvantage.com