Security
How ConfigureMyAI handles and protects your data. Every statement below is quoted from our Privacy Policy or our Terms of Service, and links to the section it came from.
Encryption
All data is encrypted via SSL/TLS when transmitted from our servers to your browser.
The database backups are also encrypted.
Your API keys for third-party services are encrypted at rest using industry-standard encryption and are never stored in plain text.
Your provider API keys
We encrypt your API keys at rest and only use them to make requests on your behalf.
We never share your API keys with other users or third parties.
Source: Terms of Service §5 — API Keys and Third-Party Services
Who can see your data
Our default practice is to not access your information.
No human looks at your data for these purposes unless an error occurs that stops an automated process from working and requires manual intervention to fix.
If at any point we need to access your account to help you with a Support case, we will ask for your consent before proceeding.
Accessing a customer's account when investigating potential abuse is a measure of last resort.
Source: Privacy Policy — When we access or share your information
Access logging
We log all access to all accounts by full IP address so that we can always verify no unauthorized access has happened.
We keep this login data for as long as your product account is active.
Payment data
Your credit card is passed directly to our payment processor and doesn't ever go through our servers.
We store a record of the payment transaction, including the last 4 digits of the credit card number and as-of billing address, for account history, invoicing, and billing support.
Where your data lives
Our products and other web properties are operated in the United States.
9th Designs, LLC is a US company and all data infrastructure are located in the US.
Sources: Privacy Policy — Location of site and data When we access or share your information
Government and legal requests
If US law enforcement authorities have the necessary warrant, criminal subpoena, or court order requiring we share data, we have to comply. Otherwise, we flat-out reject requests from local and federal law enforcement when they seek data.
Unless we're legally prevented from it, we'll always inform you when such requests are made.
We have never received a National Security Letter or Foreign Intelligence Surveillance Act (FISA) order.
Source: Privacy Policy — When we access or share your information
Retention and deletion
In total, when you trash things in our applications, they are purged within 90 days from all of our systems and logs.
We also delete your data after an account is cancelled. In this case, there is no period of data being kept in an accessible trash can so your data are purged within 60 days.
Source: Privacy Policy — What happens when you delete data in your product accounts
Selling data
"We promise we never sell your data: never have, never will."
Your side of it
Abuse of the platform
Our Terms prohibit any attempt to gain unauthorized access to our systems.
We reserve the right to suspend or terminate accounts that violate these terms.
What we do not claim
We do not warrant that the Service will be uninterrupted, secure, or error-free, or that defects will be corrected.
Getting in touch
For questions about this privacy policy, your data, or your rights with respect to your information, our Privacy Policy gives [email protected].
For questions about the Terms of Service, our Terms give [email protected].
Sources: Privacy Policy — Changes & questions Terms of Service §15 — Contact Information