Privacy Policy

1. Who We Are

PreFlight AI is a product of K.N.W. Business Advisors LLC ("we," "us," or "our"), a limited liability company registered in the United States. Our contact address for privacy matters is info@getpreflightai.com.

This Privacy Policy explains how we collect, use, store, and share information when you visit getpreflightai.com or use the PreFlight AI platform. By using our services you agree to the practices described here.

2. Information We Collect

Account and Identity Data

When you create an account or contact us, we may collect your name, email address, organization name, and job title. This data is stored in our authentication and user management system (Supabase, Inc.).

Uploaded Documents

To run a diagnostic, you may upload organizational documents such as process maps, org charts, workflow descriptions, or job descriptions. These files are transmitted to our AI processing infrastructure (Anthropic, PBC) to generate your report and are not retained beyond the processing window unless you explicitly save your results in the platform.

You are responsible for ensuring that any documents you upload do not contain sensitive, confidential, or legally protected information. See our Terms of Service for the full upload liability policy.

Usage and Analytics Data

We collect standard web analytics data including page views, session duration, referring URLs, and browser type. This data is used to understand how visitors use the site and to improve the product. It does not include personally identifiable information by default.

Communications

If you email us or submit a contact form, we retain the content of that communication to respond to your inquiry and for our records.

3. How We Use Your Information

• To deliver and improve the PreFlight AI diagnostic service
• To generate, store, and display your readiness report
• To respond to inquiries and provide customer support
• To send transactional communications (report delivery, account notifications)
• To comply with legal obligations
• To detect and prevent fraud or abuse

We do not sell your personal information to third parties. We do not use your data for advertising targeting.

4. AI Processing Disclosure

PreFlight AI uses Anthropic's large language model infrastructure to analyze uploaded documents and generate diagnostic reports. When you submit a document for analysis:

• Your document content is transmitted securely to Anthropic's API over encrypted connections
• Anthropic processes the content to produce a structured analysis
• Your data is strictly not used to train AI models by Anthropic or by us
• Processing occurs in the United States

Anthropic's data processing is governed by their own privacy and data use policies, available at anthropic.com. They are listed as a subprocessor on our Subprocessor List.

5. Data Retention

Account data is retained for the duration of your account plus 30 days after deletion. Uploaded documents are processed and not retained beyond the active session unless you save your report. Diagnostic reports are stored for 30 days after generation and then deleted unless your plan includes extended history. Communications are retained for up to 2 years.

6. Data Sharing and Subprocessors

We share data only with service providers who help us deliver the platform. Our current subprocessors are listed at getpreflightai.com/subprocessors. We require all subprocessors to maintain appropriate data protection standards and to process data only on our instructions.

We do not share personal data with any other third parties except as required by law, to protect our legal rights, or with your explicit consent.

7. Your Rights — California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act and California Privacy Rights Act:

• Right to Know: You may request a copy of the personal information we have collected about you, the categories of sources from which it was collected, and the purposes for which it is used.
• Right to Delete: You may request that we delete personal information we hold about you, subject to certain legal exceptions.
• Right to Opt Out of Sale or Sharing: We do not sell personal information. However, the analytics tools we use to understand site traffic may qualify as "sharing" personal data for cross-context behavioral advertising under CCPA/CPRA. You can opt out at any time via our cookie banner or the "Do Not Sell or Share My Personal Information" link in the footer.
• Right to Correct: You may request correction of inaccurate personal information we hold about you.
• Right to Non-Discrimination: Exercising your privacy rights will not result in a different level of service or pricing.

To exercise any of these rights, email info@getpreflightai.com with the subject line "California Privacy Request." We will respond within 45 days.

8. Your Rights — European Residents (GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where we have no legitimate ground to retain it.
• Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

Our legal bases for processing are: contract performance (delivering the service you requested), legitimate interests (improving the platform, preventing fraud, and sending marketing communications), and consent (cookies). To exercise any GDPR right, email info@getpreflightai.com. We will respond within 30 days.

If you believe we have not addressed your concern adequately, you have the right to lodge a complaint with your local data protection authority.

9. Cookies

We use essential cookies required for the platform to function (session management, authentication state). We may use analytics cookies to understand site usage. Non-essential cookies are not activated for EU visitors until you provide explicit consent via our cookie banner. California visitors may opt out of data sharing at any time via the banner or the link in our footer.

10. Security

We use industry-standard security practices including TLS encryption in transit, encrypted storage at rest, and access controls limiting who within K.N.W. Business Advisors LLC can access user data. No method of transmission or storage is 100% secure. If you become aware of a security concern, please contact info@getpreflightai.com immediately.

11. Children

PreFlight AI is a business-to-business service not directed at individuals under 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Material changes will be communicated via email to registered users.

13. Contact

For any privacy-related questions, requests, or concerns, contact us at info@getpreflightai.com or by mail at K.N.W. Business Advisors LLC, United States.