Privacy Policy - INRA.AI

About INRA.AI

INRA.AI is a research platform owned and operated by Taman Labs. Throughout this policy, "INRA.AI," "we," "us," and "our" refer to Taman Labs and its services.

Information We Collect

We collect information you provide directly to us, automatically through your use of our services, and from third-party sources as described below.

Information You Provide

Account Information: Name, email address, profile information, and authentication credentials
Research Content: Academic papers you upload, research queries, notes, citations, and document collections
AI Interactions: Questions you ask our AI assistants, prompts you provide, and feedback on AI-generated content
Payment Information: Billing details and subscription preferences (processed securely through Stripe)
Support Communications: Messages you send when contacting customer support

Information We Collect Automatically

Usage Data: Features used, session duration, research workflow patterns, and platform interactions
Technical Information: IP address, browser type, device information, operating system, and unique device identifiers
Performance Data: Error logs, response times, and system performance metrics
Analytics Data: Page views, click patterns, and user journey analytics

Information from Third Parties

Authentication Providers: Profile information from Google, LinkedIn, and other OAuth providers
Academic Databases: Paper metadata and citations from Semantic Scholar API
Payment Processors: Transaction and subscription status information from Stripe

How We Use Your Information

We use the information we collect for the following purposes:

Service Provision

Provide AI-powered research assistance, literature reviews, and report generation
Process and analyze uploaded documents using AI technologies
Generate research insights, summaries, and citations
Manage your research collections and workflow sessions
Enable PDF viewing, annotation, and document management features

AI and Machine Learning

AI Data Usage: When you use our AI features, your content may be processed by third-party AI providers (Anthropic Claude, OpenAI, Google Gemini) to generate responses. We implement data protection measures and do not use your personal research data to train our own competing models without explicit consent.

Platform Operations

Maintain, monitor, and improve platform performance and security
Provide customer support and respond to your inquiries
Process payments and manage subscriptions
Send service-related communications and important updates
Analyze usage patterns to enhance user experience
Ensure compliance with legal obligations and prevent fraud

Data Security

We implement appropriate technical and organizational measures to protect your personal information:

Encryption of data in transit and at rest
Regular security assessments and updates
Access controls and authentication measures
Secure cloud infrastructure with industry-standard practices

Information Sharing and Third-Party Services

We do not sell your personal information. We may share your information in the following limited circumstances:

AI Service Providers

Third-Party AI Processing: We share your research queries and uploaded content with AI providers (Anthropic, OpenAI, Google) to generate responses. Each provider has their own privacy policies governing data handling.

• Anthropic Claude: Research analysis and report generation
• OpenAI: Content processing and insights generation
• Google Gemini: Additional AI capabilities and analysis

Essential Service Providers

Authentication: Google and LinkedIn for OAuth sign-in services
Payment Processing: Stripe for secure payment and subscription management
Academic Data: Semantic Scholar API for research paper metadata
Infrastructure: Cloud hosting and database providers for platform operations
Analytics: Usage analytics providers for service improvement

Legal and Business Requirements

When required by law, court order, or legal process
To protect our rights, property, or safety, or that of our users
In connection with a business transfer, merger, or acquisition
With your explicit consent for other purposes

Your Rights and Choices

You have important rights regarding your personal information that vary based on your location and applicable privacy laws.

Universal Rights (All Users)

Account Control: Update your profile information and preferences through your account settings
Data Download: Export your research collections and generated reports
Communication Preferences: Control marketing and promotional emails
Account Deletion: Delete your account and associated data through account settings

GDPR Rights (EU Users)

If you are located in the European Union, you have additional rights under GDPR:

• Right of Access: Request detailed information about your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Restrict Processing: Limit how we process your data in certain circumstances
• Right to Withdraw Consent: Withdraw consent for AI data processing where applicable

CCPA/CPRA Rights (California Users)

If you are a California resident, you have rights under CCPA/CPRA:

• Right to Know: Request disclosure of personal information categories and sources
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt-out of sale of personal information (we don't sell data)
• Right to Non-Discrimination: Equal service regardless of exercising privacy rights
• Right to Correct: Request correction of inaccurate personal information
• Right to Limit Use: Limit use of sensitive personal information

How to Exercise Your Rights

To exercise any of these rights, contact us at hello@inra.ai. We will respond within the timeframes required by applicable law (typically 30 days for GDPR, 45 days for CCPA). We may need to verify your identity before processing your request.

Cookies and Tracking Technologies

We use cookies and similar technologies to provide, secure, and improve our services. Here's what you need to know:

Types of Cookies We Use

Essential Cookies

Required for authentication, security, and core platform functionality. These cannot be disabled without affecting service operation.

Analytics Cookies

Help us understand how users interact with our platform to improve performance and user experience.

Preference Cookies

Remember your settings, language preferences, and customization choices.

Your Cookie Choices

Browser Controls: Most browsers allow you to block or delete cookies through settings
Opt-Out Links: Use third-party opt-out mechanisms for analytics services
Account Settings: Control data collection preferences when logged in

Note: Disabling certain cookies may limit functionality of our AI-powered research features and personalization capabilities.

International Data Transfers

INRA.AI operates globally and may transfer your personal information to countries outside your residence, including the United States and other jurisdictions where our service providers operate.

Data Transfer Safeguards

• Standard Contractual Clauses: We use EU-approved standard contractual clauses for GDPR compliance
• Adequacy Decisions: We transfer data to countries with EU adequacy decisions where possible
• Privacy Shield: For US transfers, we follow Privacy Shield principles where applicable
• Data Processing Agreements: All service providers sign comprehensive data protection agreements

Data Retention

We retain your personal information only as long as necessary to provide our services and comply with legal obligations.

Account Data

Retained while your account is active and for 30 days after deletion to allow recovery.

Research Data

Documents and reports retained while useful to you, deleted upon account termination.

Usage Analytics

Aggregated usage data retained for up to 2 years for service improvement.

Legal Requirements

Some data may be retained longer to comply with legal, tax, or regulatory requirements.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

How We Notify You

• Website Notice: Updated policy posted with new "Last updated" date
• Email Notification: For material changes affecting your rights
• In-App Notice: Prominent notifications for significant updates
• Advance Notice: 30 days notice for major changes where legally required

Contact Us

If you have any questions about this privacy policy, our data practices, or wish to exercise your privacy rights, please contact us:

General Inquiries

Email: hello@inra.ai

For general questions about our privacy practices

Privacy Rights Requests

Email: hello@inra.ai

For GDPR/CCPA requests and data protection inquiries

Response Time: We will respond to privacy inquiries within 30 days (GDPR) or 45 days (CCPA) as required by applicable law. For urgent matters, please clearly mark your email as "URGENT - Privacy Request."