Privacy Policy

Austur AI, a product of Inseris LLC, a Virginia limited liability company ("Austur," "we," "us," or "our"), provides an AI-powered conversational assistant that businesses deploy on their websites. This policy covers how we handle data across two contexts: (1) visitors to austur.ai (our marketing site and waitlist) and (2) visitors to websites that use the Austur chat widget ("tenant sites"). If you are a business using Austur to serve your customers, your use is also governed by our Terms of Service.

1. What we collect

On austur.ai (marketing site)

When you join our waitlist, we collect your email address, name, industry, and a description of your needs. Optionally, you may provide your business name and website URL.

On tenant sites (chat widget)

When you interact with an Austur-powered chat widget on a business's website, we collect:

• Chat messages you send and receive
• Page context from the page where you opened the widget, including the URL, page title, headings, navigation links, structured data, and referrer domain
• Timestamps of your interactions
• Your browser's user agent string
• Approximate geographic location (country, city, region) derived from your IP address at the network edge
• Audio recordings if you use the voice input feature (processed for transcription, then deleted — see Section 3)
• Contact information collected during conversation, including information the assistant may ask you for such as your name, email, phone number, service interest, location, and project details

We do not store your IP address beyond what is needed for rate limiting (temporary, hashed, and not linked to your conversation). We do not use tracking cookies in the widget. We may use a visitor identifier to recognize returning visitors within the same business's site across sessions.

2. How we use your data

Marketing site data is used to evaluate your fit for early access and to send you updates about Austur.ai — launch announcements, early access invitations, and occasional product news.

Chat widget data is used to:

• Generate AI-powered responses to your questions based on the business's knowledge base
• Provide the business with conversation summaries and visitor insights via email notifications (see Section 4)
• Deliver lead and contact information to the business, including via email and webhook delivery to the business's configured systems
• Improve the quality of the assistant's responses for that specific business
• Detect and prevent abuse (rate limiting, spam detection)

We will never sell, rent, or share your personal information with third parties for their own marketing purposes.

3. AI processing and voice data

Your chat messages are processed by large language models (LLMs) to generate responses. Specifically:

• Conversation processing: Messages are sent to Google's Gemini API to generate responses grounded in the business's knowledge base.
• Speech-to-text: If you use voice input, your audio is processed by Cloudflare Workers AI for transcription. This service may use third-party models (including OpenAI) under the hood. Audio recordings are used solely for transcription and are not retained after processing.

We use conversation data to improve the assistant's performance for the specific business you interacted with — for example, refining how it answers common questions. We do not share your conversations across businesses or use them to build general-purpose AI products. Under our current provider agreements, AI providers process conversation data to generate responses and do not retain it for their own model training.

4. Visitor intelligence and profiles

We analyze conversations to extract structured signals that help the business understand visitor needs. These may include inferred service interests, budget comfort level, timeline urgency, and decision-stage indicators. This analysis is performed automatically and shared only with the business whose website you visited.

Visitor profiles are not shared across businesses.

5. Third-party services

We use the following services to operate Austur. Each processes data on our behalf under data processing agreements:

• Cloudflare (Pages, Workers, D1, R2, Workers AI) — hosting, application logic, database, file storage, and speech-to-text processing
• Google Cloud (Gemini API) — conversation AI processing
• Resend — email delivery for lead notifications and visitor insight digests sent to Tenants
• Cloudflare Turnstile — bot protection on the waitlist form, which may process your IP address and browser metadata

When a Tenant configures webhook delivery, lead and contact data is transmitted to the Tenant's own systems. Austur is not responsible for how Tenants handle data once it leaves the Service.

6. Data retention

• Waitlist submissions: Retained until you request deletion or until we no longer need them for the waitlist program.
• Chat conversations: Retained for the duration of the business's subscription plus 30 days. Businesses can request earlier deletion.
• Contact and lead data: Same retention as conversations — tied to the business's subscription lifecycle plus 30 days.
• Visitor profiles: Same retention as conversations — tied to the business's subscription lifecycle.
• Voice audio: Not retained. Audio is transcribed in real time and discarded immediately after transcription.
• Rate limiting data: IP addresses used for rate limiting are automatically purged within 24 hours and are not linked to conversations.

7. Cookies and local storage

The austur.ai marketing site uses a single sessionStorage flag to control a visual animation on first visit. The chat widget may use localStorage on the tenant's domain to maintain conversation continuity within a session. This data stays in your browser and is not transmitted to us beyond the conversation messages themselves.

We may use cookies or similar technologies for analytics and site improvement. If we do, we will provide controls to manage your preferences.

8. Data security

All data is transmitted over HTTPS. Data at rest is stored on Cloudflare's infrastructure, which provides encryption at rest and in transit. We implement input sanitization, rate limiting, and bot protection to safeguard against abuse. Access to production data is restricted to authorized personnel.

9. International data transfers

Your data is processed on Cloudflare's global network and Google Cloud infrastructure. If you are located outside the United States, your data may be transferred to and processed in the United States or other jurisdictions where our service providers operate. We rely on Cloudflare's and Google's data processing agreements and standard contractual clauses to ensure appropriate data protection.

10. Children's privacy

Austur is not directed at children under 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will delete it promptly. If you believe a child under 18 has provided us with personal information, please contact us.

11. Your rights

You can request access to, correction of, or deletion of your data at any time by contacting us.

For EU/EEA residents (GDPR)

You have the right to access, rectify, erase, restrict processing, and port your data. You also have the right to object to processing and to lodge a complaint with your local data protection authority. Our legal basis for processing is legitimate interest (providing the service you or the business requested) and, where applicable, your consent.

For California residents (CCPA)

You have the right to know what personal information we collect, request its deletion, and opt out of its sale. We do not sell personal information. To exercise your rights, contact us using the information below.

12. Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the "Last updated" date at the top of this page. Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact

Questions about this policy? Use the contact form on this site and we'll get back to you.