Privacy Policy

1. Introduction

Intake ("we," "us," or "our") operates the Intake platform, a conversational client intake service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

We collect the following types of information:

• Account information: name, email address, organization name, and password (stored securely via our authentication provider).
• Intake session data: conversational transcripts, responses, and structured content collected during intake sessions.
• Uploaded files: documents, images, and other files uploaded during intake sessions. These may contain sensitive personal information depending on your use case.
• URLs and website data: URLs shared during intake sessions, along with extracted metadata such as page titles and brand colors.
• Payment information: processed securely by Stripe. We do not store credit card numbers on our servers.
• Usage data: information about how you interact with our service, including timestamps and session metadata.

3. How We Use Your Information

• To provide and maintain our service, including intelligent conversational intake sessions.
• To process payments and manage your subscription.
• To communicate with you about your account and service updates.
• To improve and optimize our platform.
• To comply with legal obligations.

4. Third-Party AI Processing

Our service uses Anthropic's Claude AI to power conversational intake sessions and process uploaded documents. Conversation data, file contents, and session context are sent to Anthropic's API for processing. Anthropic processes this data according to their own privacy policy and data handling practices. We recommend reviewing Anthropic's privacy policy for details on how they handle data.

5. Third-Party Service Providers

We use the following third-party services to operate our platform:

• Supabase: database hosting, authentication, and file storage.
• Anthropic: AI language model for conversational processing.
• Stripe: payment processing.
• Vercel: application hosting and delivery.

6. Data Retention

We retain your account data and intake session data for as long as your account is active or as needed to provide our services. If you wish to delete your data, please contact us at the email address below. We will process deletion requests within 30 days, subject to any legal retention requirements.

7. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest, secure authentication, and access controls. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your personal data.
• Export your data in a portable format.
• Object to or restrict certain processing of your data.

To exercise any of these rights, please contact us using the information below.

9. Respondent Data

If you are a respondent (someone filling out an intake form), the business that created the intake is the data controller for the information you provide. Your conversation, uploaded files, and shared URLs are stored on our platform and accessible to the business that invited you. Our intake agent processes your responses to organize them into structured sections. If you have questions about how your data is used, please contact the business that sent you the intake link.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Your continued use of the service after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at privacy@intake.contact.