Privacy policy
Effective October 2026. This policy covers the civinti.ai website and the Civinti service at app.civinti.ai.
Who we are
Civinti.ai ("Civinti," "we") helps public agencies and private organizations put AI to work safely, through consulting services and the Civinti Workspace. Questions about this policy go to contact@civinti.ai.
This website
- This website does not use advertising or tracking cookies and does not run analytics that identify you.
- If you email us, we keep your message and contact details to respond and to follow up on the conversation you started.
- Fonts on this site load from Google Fonts, which receives your IP address when you visit.
- Our hosting provider keeps standard server logs, such as IP addresses and pages requested, for security and reliability.
The Civinti service
When an organization uses Civinti, it controls the information its people put into the service and the systems it connects. We process that information only to provide the service to that organization.
- Account information: name, work email address and organization, provided through Microsoft sign-in.
- Content: conversations with the assistant, projects, notes, saved answers and uploaded files.
- Connected-system information: tasks, email summaries and calendar entries from systems the organization connects, read when a person uses the related feature.
- Activity records: a log of emails sent and meetings created or changed through Civinti, kept for accountability.
- Automations and AI agents: these act only within the access a client approves, and each run is logged.
Each person's content is stored under their own identity and is not visible to other users unless sharing features are added and used.
Service providers
We use a small number of providers to run Civinti. Each receives only what it needs.
| Provider | Purpose |
|---|---|
| Microsoft (Azure, Entra ID, Microsoft 365) | Hosting, storage, sign-in, and email and calendar features |
| OpenAI (business API) | Generating the assistant's answers and drafts. Its business API does not use customer data to train its models. |
| Systems the organization connects, such as Wrike | Reading and creating tasks the organization has chosen to share |
| n8n | Running automated workflows an organization has approved |
| Stripe | Invoicing and payment processing |
Billing
Payments by card or bank transfer are handled by Stripe. Card and bank account numbers go directly to Stripe and are never stored on Civinti's servers. We keep billing contacts, invoices and payment status.
What we don't do
- We do not sell personal information or customer content.
- We do not use customer content to train AI models.
- We do not use customer content for advertising.
- We disclose information only to provide the service, when the customer directs us, or when the law requires it. Where the law allows, we tell the customer first.
Retention and deletion
- People can delete their own conversations, projects and files at any time; deleted files are removed from storage.
- When an organization's service ends, we return its data on request and then delete it, unless the law requires us to keep it longer.
- Records retention follows each client's own records schedule and legal obligations, agreed during onboarding.
Your choices
You can ask us what information we hold about you, or ask us to correct or delete it. If you use Civinti through your employer, we may refer your request to that organization, because it controls its data.
Changes and contact
If we make a material change to this policy, we will update the effective date and tell current customers. Contact contact@civinti.ai with any question.