Infragrid Privacy Policy

1. Overview

Infragrid.ai provides software that can capture screen recordings of task demonstrations you explicitly start, turn those demonstrations into reusable Runbooks, and operate agents across websites and desktop apps subject to user permissions and approvals. Infragrid does not continuously record your screen. This Privacy Policy explains how we handle information through our website, product, communications, and related services. Infragrid.ai is a product of Infragrid, Inc., a Delaware corporation headquartered in San Francisco, California, which is responsible for the personal information described in this policy.

If you use Infragrid.ai on behalf of an organization, your organization may have a separate agreement with us that controls how we process workspace data. If you use Infragrid as an individual rather than through an organization, this policy governs how we handle your information and you can exercise the choices described below with us directly.

2. Information handled by the services

The services handle information you provide, information generated while you use Infragrid, and information from systems or accounts you choose to connect. Screen captures use local files during processing. Saved Runbooks and their screenshots are stored in authenticated cloud storage associated with your account and applicable workspace permissions.

• Account and contact information, such as name, work email, company, role, and communications with us.
• Screen-capture information, such as screenshots, interactions, app or website context, window information, and timestamps captured during a recording you explicitly start.
• Task and workflow content, such as prompts, selected task context, Runbooks, instructions, inputs, outputs, approval decisions, exceptions, and run history.
• Usage and device information, such as log data, browser type, IP address, pages visited, product events, and approximate location derived from technical data.
• Connected-app information, when you authorize Infragrid to access or act through third-party websites, desktop apps, storage, communications, productivity, data, or identity systems.

3. Screen recording and task capture

Infragrid does not continuously record your screen. You explicitly start a screen recording, choose its capture scope, and stop it when your task demonstration is complete. Capture operates within that scope and the operating-system permissions you grant.

Recordings are processed into Runbooks and supporting screenshots. Local capture files are staged during processing, and saved Runbooks and screenshots are uploaded to our hosted services. Local recovery files may remain if saving fails. Agents may also observe relevant browser or app content while carrying out tasks you authorize.

Recording your screen can capture information about other people, such as names, messages, or images that appear in a video call, an email, or a shared document. You are responsible for using Infragrid in line with the laws and workplace rules that apply to you, including any requirement to tell other people or obtain their permission before recording. Choose a capture scope that excludes information about other people that should not be recorded, and stop the recording before displaying that information.

Recording your screen can also capture sensitive information, such as health, financial, or account information displayed on your screen. Infragrid does not seek out sensitive information, and we do not use what is captured in your recordings to build profiles about you or to infer characteristics such as your health or financial position. Do not include an app or website in your capture scope if you do not want it recorded.

4. How we use information

We use information to provide, secure, improve, and support Infragrid.ai. We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law.

• Provide and operate the services, including screen recording and task capture, answers based on selected context, Runbook creation and execution, connected-app actions, approvals, workspace administration, and customer support.
• Protect accounts, investigate abuse, monitor reliability, debug errors, and maintain auditability.
• Communicate with you about product updates, security notices, support requests, billing, and administrative matters.
• Improve product performance, quality, and user experience using aggregated or de-identified data, or data you have expressly authorized us to use for that purpose. We maintain de-identified data in de-identified form and do not attempt to re-identify it.

5. Customer content and AI processing

Customer content remains under the control of the customer or workspace owner. Infragrid.ai uses customer content to provide the requested service and to generate outputs for authorized users.

Creating a Runbook, asking a question, or running an agent may send relevant task content to our hosted services and third-party AI providers for processing. Depending on the feature, this content may include recorded steps, screenshots, prompts, Runbook instructions, and context from apps you authorize.

We do not use your content, including screen captures, prompts, Runbooks, connected-app data, and outputs, to train AI models, whether our own models or a third party's. Where third-party AI providers process customer content, we configure them to process that content only to provide the service and use zero-data-retention terms where available, subject to our agreements with those providers.

6. How we share information

We share information only as needed to operate Infragrid.ai, comply with law, or with your direction.

• Service providers that support hosting, infrastructure, analytics, customer support, security, communications, payment processing, and AI processing. We require these providers by written agreement to protect the information, to use it only to provide services to us, and not to sell it or use it for their own purposes.
• Your organization and authorized workspace users, according to workspace permissions and administrative controls.
• Third-party websites, apps, and connected services when you direct Infragrid to retrieve information or take an approved action through them.
• Professional advisors, regulators, courts, law enforcement, or other parties when required by law or to protect rights, safety, and security.
• Successors in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate protections.

7. Cookies and similar technologies

We use cookies, local storage, and similar technologies to support functions such as sign-in, session protection, and remembering preferences. On our public website, optional PostHog analytics is off until you accept it. You can accept or reject analytics and change your choice at any time through Cookie settings in the website footer. We remember this choice in local storage for up to 180 days. When enabled, website analytics uses cookies with a 180-day expiry and measures page visits; website session recording and automatic interaction capture are disabled. Rejecting analytics does not prevent you from using the website. We do not use advertising cookies and we do not sell information collected through these technologies.

You can also block or delete cookies through your browser settings, though some features of the website may not work as intended if you do.

8. Security and retention

We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, and alteration. If a security incident affects your personal information, we will notify you and any regulator that must be notified, without undue delay and within the timeframes the law requires, and we will describe what happened, what information was involved, and the steps you can take.

Local capture files support task processing and recovery. After screenshots are successfully saved with a Runbook, their temporary staging files are eligible for cleanup; failed saves may retain local recovery files. We retain information processed by our hosted services only for as long as we need it for the purposes described in this policy, and no longer than the periods below unless a longer period is required by law or to resolve a dispute:

• Account and contact information: while your account is active, and for up to 60 days after you close it, as described below.
• Task and workflow content, including prompts, selected context, Runbooks, inputs, outputs, and run history: 12 months from creation, or until you delete it, whichever comes first.
• Usage, device, and security logs: 12 months.
• Support and other communications with us: 24 months.
• Billing and payment records: 7 years, as tax and accounting rules require.

You can delete your content or close your account at any time. After you close your account, you can request an export of your content for 30 days. After that, we delete or de-identify the information above within a further 30 days, except for copies retained in routine backups or where we are required to keep it to meet a legal obligation or to resolve a dispute. If you use Infragrid through an organization, your workspace administrator may also request deletion or export under that organization's agreement with us, and you can contact us directly if you are unable to reach them.

9. Your choices and rights

Depending on where you live, you may have the right to know what personal information we hold about you and how we use it, to receive a copy of it, to correct it, to delete it, to receive it in a portable format, to object to or restrict certain processing, to opt out of any sale or sharing of personal information and of targeted advertising and profiling, to limit our use of sensitive personal information, and to withdraw consent you previously gave. We will not deny you service, charge you a different price, or give you a lower quality of service because you exercised a privacy right.

To make a request, email privacy@infragrid.ai. We will acknowledge your request within 10 business days and respond within 45 days, and we will tell you if we need up to 45 additional days. You may use an authorized agent to make a request on your behalf. We may ask you to verify your identity before we act on a request about specific information, and we will not require you to create an account or verify your identity in order to opt out of the sale or sharing of your information. If we decline a request, we will explain why, and you may appeal by replying to our response; we will decide the appeal within 45 days.

You may opt out of non-essential marketing communications by using the unsubscribe instructions in those messages. We may still send transactional or service-related communications.

10. Children’s privacy

Infragrid is not directed to children. You must be at least 16 years old to create an account or use Infragrid, and we do not knowingly collect personal information from anyone under that age. If we learn that we have collected personal information from a child under the applicable age, we will delete it promptly. A parent or guardian who believes that a child has provided us with personal information can contact us at privacy@infragrid.ai.

11. International transfers

Infragrid.ai may process information in the United States and other locations where we or our service providers operate. Our team and our service providers are located in the United States and India. Where we transfer personal information from the European Economic Area, the United Kingdom, or Switzerland to a country that has not been recognized as providing an adequate level of protection, we rely on the European Commission’s Standard Contractual Clauses, together with the UK Addendum or International Data Transfer Agreement for transfers from the United Kingdom, and on additional technical and contractual measures. You can request a copy of the relevant safeguards by contacting us.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy with a new effective date and keep prior versions available. If changes are material, we will provide notice at least 30 days before they take effect, through the services, by email, or by another reasonable method.

13. Contact

For privacy questions or requests, contact Infragrid, Inc. at privacy@infragrid.ai, or write to us at 1062 Sutter St #3, San Francisco, CA 94109. If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority.