Privacy Policy

Last updated: May 17, 2026

1. What data we collect

When you create an account and use Anita, we collect:

  • Account information: email address and name
  • Documents and files you upload to the platform
  • Usage data: queries sent to the AI assistant, features used, session metadata
  • Billing information (processed by Stripe — we do not store card numbers)

Note: Uploaded documents may contain sensitive information (e.g., client records, legal documents, financial data). This content is processed by AI to power search and summarization features. You are responsible for ensuring you have the right to upload and process this data.

2. How we use your data

  • To provide, maintain, and improve the Anita service
  • To process your uploaded documents using AI (text extraction, embeddings, summarization)
  • To send transactional emails (email verification, password resets, security alerts)
  • To analyze usage patterns and improve platform performance
  • To comply with legal obligations

We do not sell your data to third parties. We do not use your data for advertising.

3. Third-party services

Anita uses the following third-party services to operate:

  • Supabase — database storage, authentication, and file storage. Your account data and uploaded documents are stored on Supabase infrastructure. Supabase Privacy Policy
  • Anthropic — AI assistant (Claude). Queries and relevant context from your workspace are sent to Anthropic to generate responses. Anthropic Privacy Policy
  • Vercel — application hosting and edge infrastructure. Vercel Privacy Policy
  • Resend — transactional email delivery
  • Stripe — payment processing (if you subscribe to a paid plan)

4. Cookies

Anita uses essential cookies only — specifically, a session cookie issued by NextAuth to keep you logged in. We do not use tracking, analytics, or advertising cookies.

5. Data retention

We retain your data for as long as your account is active. Upon account closure, your data (including uploaded documents and AI conversation history) will be deleted within 30 days. Anonymized, aggregated usage statistics may be retained indefinitely.

6. Your rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (right to erasure)
  • Request a portable export of your data
  • Object to or restrict certain processing

To exercise any of these rights, email us at privacy@anita.app.

7. Security

We implement industry-standard security measures including encrypted data storage, HTTPS-only connections, and access controls. However, no system is completely secure. If you suspect unauthorized access to your account, contact us immediately at privacy@anita.app.

8. Contact

If you have questions about this Privacy Policy or how we handle your data, please contact us at privacy@anita.app.

This policy may be updated from time to time. We will notify you of material changes by email or by a notice in the app.