Privacy Policy

Scope and privacy roles

This notice covers the Engage AI public website, account and subscription journeys, and the Engage AI business workspace. It applies to website visitors, account users, billing contacts and people whose messages are handled through a customer workspace.

I3 LLC operates Engage AI and is responsible for personal data it processes for its own website, account administration, billing, support and security purposes. Where a business customer determines how customer conversations and workspace records are used, that business generally acts as the data controller, and Engage AI processes the information on its instructions under the applicable agreement.

Information we collect

The information handled depends on how the service is used. We aim to collect only what is reasonably needed for the relevant purpose.

• Account and contact information, such as name, work email, workspace name, role, language and authentication records.
• Billing and subscription information, such as legal or company name, billing address, tax details, plan, currency, invoices and provider references. Raw card details are handled by the payment provider.
• Customer engagement data, such as channel identifiers, messages, attachments, lead details, appointments, notes, status, assignment and handover history.
• Configuration and approved content, including service information, templates, automation rules, AI guidance and provider settings.
• Technical, security and usage records, such as request time, coarse network or risk signals, device and browser data, audit events, delivery events, errors and feature usage.
• Consent and preference records, including required legal acceptance, optional marketing choice, communication opt-outs and cookie choice.

Where information comes from

Information may come directly from a visitor or account user, from the business customer that administers a workspace, from a person communicating with that business, or from connected providers such as messaging, calendar, email and payment services.

We may also create operational records when the service validates access, delivers a message, applies a configured workflow, records consent or investigates an error or security event.

Why we use information

Information is used to provide and administer the service, authenticate users, deliver configured communications, maintain conversation history, support human handover, manage subscriptions, prevent abuse, troubleshoot issues, meet legal obligations and maintain auditable business records.

Depending on the context and applicable law, processing may be necessary to perform a contract, take requested pre-contract steps, comply with law, protect legitimate security and service interests, or act on consent. Customers are responsible for establishing an appropriate basis for the customer data and communications they control.

AI, automation and human review

Configured AI features may use relevant conversation context, approved business content and workflow state to prepare answers, classify intent or suggest a next action. Deterministic services perform business-critical writes, and authorized users can review history and take over a conversation.

Customers should not configure the service to make solely automated decisions with legal or similarly significant effects without completing their own legal, risk and human-review assessment.

When information is shared

Information may be shared with authorized customer users, service providers acting for Engage AI, connected providers selected or configured by the customer, professional advisers, and authorities where disclosure is legally required or necessary to protect rights and security.

We do not sell customer conversation content. Information sent to a connected provider depends on the enabled feature and customer configuration. Messaging integrations may transmit messages and attachments to Meta/WhatsApp; Stripe processes payment details when used for checkout; configured AI, email and calendar providers receive the information needed for the requested operation. Contact us for information about the providers relevant to your use of the Service.

Optional website analytics

With your permission, the public website uses Google Analytics 4 to measure page visits and marketing actions. Google receives pseudonymous browser identifiers, technical device information, sanitized page URLs and approved event fields. This is not anonymous processing. We do not intentionally send contact form contents, account identifiers, payment details, email addresses, verification tokens or private conversation content to Google Analytics.

With analytics consent, Engage AI connects marketing source and campaign labels to signup progress and the signup email in internal CRM reports for up to 60 days. Only authorized Super Admins can access these reports. Signup contact details and internal account links are not sent to Google. Declining analytics leaves source unknown while essential signup and checkout records continue to support operational reporting.

Google may process analytics data in the United States and other countries where Google operates. User-level and event-level analytics data retention is set to 2 months; aggregated reports have separate retention. Advertising features and Google signals are disabled. The Cookie and storage notice explains browser storage and how to withdraw consent.

International data transfers

Personal data may be processed in countries other than the country where you or the business customer are located, depending on the hosting infrastructure and connected providers used. Applicable data protection requirements continue to apply to those transfers.

Contact [email protected] for information about processing locations and applicable safeguards relevant to your workspace or request. Our mailing address does not identify where all service data is hosted or processed.

Retention and deletion

Information is kept only for as long as needed for the stated purpose, customer instructions, security, dispute resolution and legal or financial recordkeeping. Different records have different operational and statutory periods.

Incomplete signup records have an expiry and are subject to scheduled cleanup of eligible expired records. Expiry of a login, verification token or signup session does not by itself mean that every associated record has been deleted. Limited security and lifecycle metadata may remain.

Customer business records, including conversations, attachments, contacts, appointments and orders, remain until an authorized deletion or another applicable retention process is completed. Subscription cancellation does not automatically delete workspace records. Technical logs and support enquiries have separate retention and cleanup settings; billing, audit and legally required records may be retained for their applicable purposes. Contact us for the retention information relevant to a particular record.

How information is protected

Engage AI uses role-based access, tenant-scoped data boundaries, secure session controls, server-side secret handling, audit records and monitored operational workflows. No system can guarantee absolute security, so customers must also protect their users, devices and connected provider accounts.

See the Security page for a factual description of implemented safeguards and assurance limits.

Your rights and choices

Information required to create, secure or administer an account, provide a requested service or meet legal obligations is identified when collected. If you do not provide required information, we may be unable to provide the relevant service. Optional marketing choices do not determine access to the core Service.

Where processing relies on consent, you may withdraw that consent. Withdrawal does not affect prior lawful processing and may affect services that require the information.

Depending on applicable law and the processing context, a person may have rights to request access, correction, deletion, restriction, objection, portability or withdrawal of consent, and to complain to a regulator. Some rights are limited by law or by another person's rights.

If the information is controlled by an Engage AI business customer, contact that business first. Engage AI will support verified customer requests as required by the service agreement and applicable law.

• Use communication opt-out instructions for marketing or automated follow-up where provided.
• Use the cookie choices on the Cookie and storage notice for optional public-site analytics.
• Do not send passwords, payment card details or unnecessary conversation content in an initial privacy request.

Children, policy changes and contact

Engage AI is a business service and is not directed to children. Customers must not intentionally use it to collect children's data without an appropriate legal basis, safeguards and an approved use case.

We may update this notice when the service, providers or legal requirements change. Material changes will be versioned and communicated where required; new wording applies from its stated effective date.