Privacy Policy

Privacy Policy

Your privacy is important to us. This Privacy Policy explains our practices regarding the collection, use and disclosure of information that we receive through our Services. This Privacy Policy does not apply to any third-party websites, services or applications, even if they are accessible through our Services.

In this Privacy Policy:

We'll refer to our website as the “Site”.
We'll refer to all the products and services we provide, individually and collectively, as the “Services”.
We'll refer to you, the person or entity accessing our Site or using our Services, as “you” or “your” or (if you are a purchaser of our Services), our “customer”.

Definitions

Data Controller: For general data protection regulation purposes, the “Data Controller” means the organization who decides the purposes for which, and the way in which, any Personal Information is processed. Our customers are the Data Controllers.

Data Processor: A “Data Processor” is an organization which processes Personal Information for a Data Controller. We are the Data Processor for our customers. As a Data Processor, we are bound by the requirements of the General Data Protection Regulations (the “GDPR”).

Data Processing: Data processing is any operation or set of operations (whether automated or not) performed upon Personal Information. Examples of data processing explicitly listed in the text of the GDPR are: collection, recording, organizing, structuring, storing, adapting, altering, retrieving, consulting, using, disclosing by transmission, disseminating or making available, aligning or combining, restricting, erasure or destruction.

Personal Information: Personal information is any information which is about you, from which you can be identified. Personal Information includes information such as an individual's name, address, telephone number, or e-mail address. Personal Information also includes information about an individual's activities, such as information about his or her activity on Site or our Services, and demographic information, such as date of birth, gender, geographic area, and preferences, when any of this information is linked to personal information that identifies that individual. Personal Information does not include "aggregate" or other non-personally identifiable information. Aggregate information is information that we collect about a group or category of products, services, or users that is not personally identifiable or from which individual identities are removed.

How do we collect Personal Information?

In our service as a Data Processor, we collect Personal Information from Data Controllers in several ways:

Information you provide to us directly.
Information we may receive from third parties.
We may receive information about you, including Personal information, from other third parties, and may combine this information with other personal information we maintain about you. If we do so, this Privacy Policy governs any combined information that we maintain in personally identifiable format.

What information do we collect?

We may collect the following types of personal information from you:

Your first and last name, username and email address.
Your company’s name.
Your (and/or your company’s) physical address.
Information you choose to provide us through our Services (including, for example, your birthdate and/or phone number).
We may collect information you post to, or collect from, users of the Services. We use this information to operate, maintain, and provide to you the features and functionality of the Services.
We may also collect and aggregate information about the use of our Site and our Services. That information includes browser and device data, such as IP address, device type, screen resolution, browser type, operating system name and version, language, as well as add-ons for your browser. The information may also include usage data, including the pages visited on and links clicked on our Site, the time spent on those pages, and the pages that led or referred you to our Site.
We may also permit third-party online advertising networks to collect information (through Cookies or similar tracking technology) about your and others’ use of our Services and any of your mobile or web applications, in order to allow those third-party networks to display ads that may be relevant to your interests on our Services as well as on other websites or apps.

What do we use your Personal Information for?

We will use your Personal Information, in compliance with this Privacy Policy, to help us deliver the Services to you. Any of the information we collect from you may be used in the following ways:

To operate, maintain, and provide to you the features and functionality of the Services.
To compile statistics and analysis about use of our Site and our Services.
To personalize your experience.
To improve our Site and our Services — we continually strive to improve our site offerings based on the information and feedback we receive from you.
To improve customer service — your Personal Information helps us to more effectively respond to your customer service requests and support needs.
To send periodic emails — The email address you provide may be used to send you information, notifications that you request about changes to our Services, to alert you of updates, and to send periodic emails containing information relevant to your account.
If you purchase our Services, then to enable you to purchase, renew and appropriately use a commercial license to our Services.
We may also use Personal Information you provide to send you email marketing about Bellaire AI products and services, invite you to participate in events or surveys, or otherwise communicate with you for marketing purposes. We allow you to opt-out from receiving marketing communications from us as described in the "Your Choices" section below.

In certain features of our Services, your Personal Information or content you provide may be used to generate AI-powered outputs (e.g., responses, documents, or automations) based on prompts you initiate. These outputs are generated solely for your use and are not used to train Bellaire AI’s models or any third-party models. We do not retain your prompts or AI-generated outputs beyond what is necessary to deliver the functionality to you. If third-party AI providers (e.g., OpenAI or Anthropic) are used for inference, your data may be transmitted to such providers only as necessary to generate the output. Such third parties are contractually bound not to retain, train on, or use your data beyond processing your request, in accordance with our Data Processing Agreements. You remain responsible for reviewing AI-generated outputs for accuracy, compliance, and appropriateness before using them in any legal, business, or operational setting. Bellaire AI does not assume liability for actions taken based on outputs generated via our AI-enabled tools.

We may also use your Personal Information where necessary for us to comply with a legal obligation, including to share information with government and regulatory authorities when required by law or in response to legal process, obligation, or request.

We cooperate with government and law enforcement officials or private parties to enforce and comply with the law. We may disclose your Personal Information to government or law enforcement officials or private parties as we believe necessary or appropriate: (i) to respond to claims, legal process (including subpoenas); (ii) to protect our property, rights and safety and the property, rights and safety of a third party or the public in general; and (iii) to stop any activity that we consider illegal, unethical or legally actionable activity.

We will request your consent before we use or disclose your Personal Information for a materially different purpose than those set forth in this Policy.

Legal Basis for Processing

Bellaire AI processes Personal Information only where we have a valid legal basis under applicable data protection laws. Depending on your jurisdiction and the specific context of the interaction, the legal bases for processing your Personal Information may include the following:

Performance of a Contract: We process your Personal Information where it is necessary to enter into, or perform our obligations under, a contract with you. This includes providing access to and support for our Services, managing billing, and responding to customer inquiries.

Consent: In situations where we are not relying on another legal basis (such as contractual necessity or legal obligation), we process your Personal Information based on your explicit and informed consent. You may withdraw your consent at any time by contacting us at hello@bellaire.ai; however, this will not affect the lawfulness of processing prior to withdrawal.

Legitimate Interests: We may process your Personal Information when doing so is necessary for our legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. Such interests include maintaining and improving our Services, conducting internal analytics, ensuring information security, preventing fraud or misuse, and developing new features.

Legal Obligations: We may process your Personal Information where required to comply with our legal or regulatory obligations. This includes maintaining appropriate business records, responding to lawful requests from government authorities, and complying with applicable laws such as tax or anti-money laundering regulations.

Protection of Vital Interests or Public Tasks (where applicable): In rare circumstances, we may process data to protect someone’s life or for the performance of a task carried out in the public interest or in the exercise of official authority.

Jurisdictional Compliance: If you are located in the European Economic Area (EEA), the United Kingdom, California, or another jurisdiction that imposes legal requirements for data processing, we ensure your Personal Information is processed only in accordance with the legal bases set forth above and consistent with your rights under applicable law, including the GDPR, CCPA, and similar frameworks.

Your Choices About Your Personal Information

We may use the information we collect or receive to communicate directly with you. We may send email marketing communications about Bellaire AI. If you do not want to receive such email messages, you will be given the option to opt out. We will try to comply with your request(s) as soon as reasonably practical. Additionally, even after you opt out from receiving marketing messages from us, you will continue to receive administrative messages from us regarding our Services (e.g., account verification, purchase and billing confirmations and reminders, changes/updates to features of the Service, technical and security notices).

In addition, you may opt out of allowing third-party online advertising networks to collect information from our Site by adjusting the browser settings on your computer or mobile device. Please refer to your mobile device or browser’s technical information for instructions on how to delete and disable cookies, and other tracking tools.

Protection of Personal Information

Bellaire AI cares about the security of your Personal Information, and we make reasonable efforts to ensure a level of security appropriate to the risk associated with the processing of your Personal Information. We maintain organizational, technical, and administrative procedures designed to protect your Personal Information against unauthorized access, deletion, loss, alteration, and misuse. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you believe that your interaction with us is not secure, please contact us immediately.

You are responsible for maintaining the secrecy of your unique password and account information, and for controlling access to your email communications from Bellaire AI. Your privacy settings may also be affected by changes to the functionality of third-party sites and services that you add to the Bellaire AI Service, such as single sign on. Bellaire AI is not responsible for the functionality or security measures of any third party. Upon becoming aware of a breach of your Personal Information, we will notify you as quickly as we can and will provide timely information relating to the breach as it becomes known in accordance with any applicable laws and regulations or as is reasonably requested by you.

Bellaire AI is committed to protecting your data and does not use it to train Artificial Intelligence models. Bellaire AI does not share customer data with their-party AI model providers with the purpose of improving their products or models. To further safeguard your information, we have established Data Processing Addendums (DPAs) with our third-party model providers, ensuring they do not use any customer data to improve their products or models. You can find more details in the OpenAI DPA here. If users desire to opt-out from any data being sent from their Bellaire AI account to any third party Bellaire AI integration (e.g. OpenAI, Anthropic, etc.), they can do so by emailing hello@bellaire.ai. Data uploaded by users to Bellaire AI might be sent to third-party model providers for the purpose of inference, if the user executes their project. This data is not used to improve the model or product of the third-party, as outlined in the DPAs. If users desire to opt-out from any data being sent from their Bellaire AI account they can do so by emailing here.

Data Security and Breach Notification

Bellaire AI takes the security of your Personal Information seriously. We implement and maintain appropriate technical and organizational measures designed to protect your data against unauthorized access, disclosure, alteration, and destruction. These measures include, but are not limited to:

Encryption of data in transit and at rest using industry-standard protocols.
Secure server infrastructure hosted in ISO/IEC 27001, SOC 2, or similarly certified data centers.
Access controls that restrict Personal Information to authorized personnel on a need-to-know basis.
Regular security testing and vulnerability scanning of our systems.
Multi-factor authentication for administrative access.
Periodic staff training on data protection and information security best practices.
Logging and monitoring of system activity to detect potential misuse or unauthorized access.

Where we use third-party service providers to store or process Personal Information on our behalf (e.g., cloud infrastructure, analytics, or AI model inference), we enter into Data Processing Agreements (DPAs) requiring such providers to implement adequate safeguards and prohibiting the use of customer data for their own model training, product development, or any other unauthorized purpose. For example, Bellaire AI has executed DPAs with providers such as OpenAI and Anthropic that explicitly restrict such use.

Bellaire AI does not use your data to train artificial intelligence models, nor do we share customer data with third-party model providers for model improvement. Where our Services require routing data to third-party AI providers for inference purposes (e.g., to generate an AI output you’ve requested), such transmission is limited to what is strictly necessary and is covered by applicable DPAs. You may request to opt out of any data being sent to third-party providers by contacting us at hello@bellaire.ai.

Despite our best efforts, no method of transmission over the Internet or method of electronic storage is entirely secure. If you believe your interaction with us is no longer secure or your account credentials have been compromised, you must contact us immediately at hello@bellaire.ai. You are responsible for maintaining the confidentiality of your password and account details, as well as for securing any device or service through which you access Bellaire AI. In the event of a data breach that is likely to result in a risk to your rights and freedoms, Bellaire AI will:

Promptly assess the nature and scope of the incident.
Notify affected individuals and/or data controllers without undue delay, and no later than is required under applicable law.
Provide clear and concise information about:
- The nature of the breach.
- The categories and approximate number of individuals and records affected.
- The likely consequences of the breach.
- The measures taken or proposed to be taken to address and mitigate the breach.
Notify applicable supervisory authorities (e.g., under Article 33 of the GDPR) within 72 hours of becoming aware of the breach, where required.

You are responsible for maintaining the confidentiality of your account credentials and ensuring that any systems you use to access our Services are adequately secured. If you believe your account or data has been compromised, please contact us immediately at hello@bellaire.ai.

‍

Cookies

We use cookies to remember information so that you don’t have to re-enter it during your visit or the next time you visit the Site, to understand and save your preferences for future visits, to compile aggregate data about site traffic and site interaction, to provide custom, personalized content, support, or information, including advertising. Unlike persistent Cookies, session Cookies are deleted when you log off from the Services and close your browser. Although most browsers automatically accept Cookies, you can change your browser options to stop automatically accepting Cookies or to prompt you before accepting Cookies. Please note, however, that if you don’t accept Cookies, you may not be able to access all portions or features of the Site or the Services. At present, there is no industry standard for recognizing Do Not Track browser signals, so we do not currently respond to them.

Who at Bellaire AI may access your Personal Information?

Designated members of our staff may access Personal Information to help our customers with any questions they have, including help using our Services, investigating security issues, or following up on bug fixes with a customer.

Do we disclose any information to outside parties?

Except as set out below, we do not sell, trade, or otherwise transfer to outside parties your Personal Information.

We may share your Personal Information with other companies owned by or under common ownership as Bellaire AI, which also includes our subsidiaries (i.e., any organization we own or control).
These companies will use your Personal Information in the same way as we can under this Privacy Policy, unless otherwise specified.
We may disclose your Personal Information to third-party service providers (for example, payment processing and data storage and processing facilities) that we use to provide the Services.
We limit the Personal Information provided to these service providers to that which is reasonably necessary for them to perform their functions, and we require them to agree to maintain the confidentiality of such Personal Information.
We may contract with third-party service providers to assist us in better understanding our Site visitors.
These service providers are not permitted to use the information collected on our behalf except to help us conduct and improve our business.
We may also release your Personal Information when we believe release is appropriate to comply with the law, enforce our site policies, or protect our or others’ rights, property, or safety.
In particular, we may release your Personal Information to third parties as required to (i) satisfy any applicable law, regulation, subpoena/court order, legal process or other government request, (ii) enforce our Terms of Service, including the investigation of potential violations thereof, (iii) investigate and defend ourselves against any third party claims or allegations, (iv) protect against harm to the rights, property or safety of Bellaire AI, its users or the public as required or permitted by law and (v) detect, prevent or otherwise address criminal (including fraud or stalking), security or technical issues.
If you enable a public sharing of your Bellaire AI applications, any information or content that you voluntarily disclose in your application becomes available to the public. If you remove information that you posted to the Services, copies may remain viewable in cached and archived pages of the Service, or if other users of the Services have copied or saved that information.
In the event that we enter into, or intend to enter into, a transaction that alters the structure of our business, such as a merger, reorganization, joint venture, assignment, sale, or change of ownership, we may share Personal Information for the purpose of facilitating and completing the transaction.

How do we handle global transfers and processing of your Personal Information?

Personal Information may be stored and processed in any country where we have operations, or where we engage service providers. This means that we may collect your Personal Information from, transfer it to, and store and process it in the United States and other countries outside of where you live. For example, some of our third-party providers may be located in different countries. Where this is the case, we will take steps to make sure the right security measures are taken so that your privacy rights continue to be protected as outlined in this Privacy Policy. By submitting your Personal Information, you’re agreeing to this transfer, storing or processing.

If you are located in the European Union or other regions with laws governing data collection and use that may differ from U.S. law, please note that we may transfer information, including Personal Information, to a country and jurisdiction that does not have the same data protection laws as your jurisdiction. If we transfer your Personal Information from the E.U. and process it in the United States, we do so in accordance with applicable law. In certain situations, we may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Retention of your Personal Information

Bellaire AI retains your Personal Information only for as long as necessary to fulfill the purposes for which it was collected, including to provide the Services, maintain business and operational continuity, comply with legal and contractual obligations, resolve disputes, enforce our agreements, and protect our legitimate interests.

When determining the appropriate retention period, we consider the nature and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the data, and whether those purposes can be achieved through other means. We also take into account applicable legal requirements, including statutory limitation periods, industry standards, and regulatory obligations.

Once the applicable retention period expires, we will securely delete, de-identify, or anonymize your Personal Information in accordance with our internal data retention policies, unless we are legally required to retain it for a longer period.

If you request the deletion of your Personal Information, we will comply with that request subject to any overriding legal obligations or legitimate business needs that require continued retention. For more information on how to exercise your rights, please refer to the “Your Rights” section of this Privacy Policy.

Third-party Links

The Services may provide the ability to connect to other websites. These websites may operate independently from us and have their own privacy policies and notices, which we suggest you review. If the linked website is not owned or controlled by us, we are not responsible for its content, or the privacy practices

Your Consent

By using our site, you consent to this Privacy Policy.

Children’s Privacy (COPPA Compliance) Bellaire AI is committed to protecting the privacy of children and complying with the Children’s Online Privacy Protection Act (COPPA), which governs the collection of personal information from children under the age of 13 in the United States.

Our Services are not directed to, intended for use by, or marketed to children under the age of 13. We do not knowingly collect, solicit, or maintain any personal information from individuals under the age of 13. If you are under 13, please do not use our Services or submit any personal information to us through the Site, application interfaces, or any other channel.

If we become aware that we have inadvertently collected personal information from a child under the age of 13 without appropriate parental consent, we will take immediate steps to delete such information from our records and terminate the associated account or activity. Parents or legal guardians who believe their child has provided us with personal information without their consent should contact us promptly at hello@bellaire.ai.

While we do not actively monitor the age of our users, we reserve the right to request proof of age at any time to ensure that we are not collecting or maintaining information from children under 13. Use of our Services is conditioned on the user’s representation that they are at least 13 years of age.

If in the future we decide to collect personal information from children under 13, we will obtain verifiable parental consent before doing so and will update this section of our Privacy Policy in compliance with COPPA requirements.

Your Rights

Other rights you have include the rights to:

Ask for a copy of your Personal Information
Ask us to correct your Personal Information that is inaccurate, incomplete, or outdated
Ask us to transfer your Personal Information to other organizations.
Ask us to erase certain categories or types of information
If you choose to remove your Personal Information, you acknowledge that we may retain archived copies of your Personal Information in order to satisfy our legal obligations, or where we reasonably believe that we have a legitimate reason to do so.
Ask us to restrict certain processing
You have the right to object to processing of Personal Information. Where we have asked for your consent to process information, you have the right to withdraw this consent at any time.

We will not discriminate against you for exercising any of your privacy rights under applicable law. To exercise any of these rights, please contact us at hello@bellaire.ai. To protect your privacy and the security of your information, we may verify your identity before acting on your request. Verification may involve confirming your email address or requesting additional information as permitted by law. We will respond to your request in accordance with applicable legal timeframes.

‍

Changes to our Privacy Policy

If we decide to change our privacy policy, we will post those changes on this page. If we are going to use Personal Data collected through the Site in a manner materially different from that stated at the time of collection, then we will notify users via email and/or by posting a notice on our Site for 30 days prior to such use or by other means as required by law.

Contacting Us

If you would like to submit a data rights request (also known as a data subject access request), please email hello@bellaire.ai.

If you have any other questions, comments, or concerns about this privacy policy, please contact us using the following contact information:

Bellaire AI (Belaire, Inc.)
Attn: Privacy
2810 N Church St PMB 520915

Wilmington, Delaware 19802-4447 US

hello@bellaire.ai

Bellaire AI, (Belaire, Inc.) Privacy Policy
Last Updated: Aug 3rd, 2025

‍