Privacy Policy

The Short Version

We collect minimal data to operate the service. Your business data stays yours. We don't sell it, don't use it to train models, and don't share it with other customers. Each deployment is isolated. You can get your data back anytime and we delete it when you leave.

1. Who We Are

Andr3w AI is operated by Projul, Inc. ("Andr3w," "we," "us"). This Privacy Policy describes how we collect, use, and protect information in connection with the Andr3w platform and AI agent services.

2. Information We Collect

Information you provide:

• Contact information (name, email, company name) when you request a consultation
• Business context, brand guidelines, and operational parameters provided during onboarding
• API credentials and access tokens for systems you authorize the agent to use
• Instructions and feedback you provide to the agent during operation

Information the agent processes:

• Data from systems you authorize (CRM records, analytics data, financial data, code repositories, etc.)
• Content created by the agent on your behalf
• Communication logs between your team and the agent

Website visitors:

• We do not currently use analytics tracking, cookies, or third-party trackers on andr3w.ai
• Standard server logs (IP address, browser type, pages visited) may be collected by our hosting provider (Microsoft Azure)

3. How We Use Information

• To deliver the Service. We use your information to configure, operate, and maintain your AI agent deployment.
• To communicate with you. We use your contact information to respond to inquiries, provide support, and send service-related notices.
• To improve the platform. We may use aggregated, anonymized usage patterns (not your business data) to improve the Andr3w platform. We will never use your specific Customer Data for this purpose.

4. What We Don't Do

• We do not sell your data to anyone.
• We do not use your business data to train AI models.
• We do not share your data with other customers.
• We do not use your data for advertising or marketing purposes.
• We do not allow agents from different deployments to access each other's data.

5. Data Isolation and Security

Each customer deployment is isolated at the infrastructure level. Your data, credentials, agent memory, and configuration are stored separately from every other customer.

Security measures include:

• API credentials stored in environment-level vaults, never in logs or messages
• Full audit trails on every agent action
• Role-based access controls on agent permissions
• Infrastructure hosted on Microsoft Azure with SOC 2 Type II, ISO 27001, and HIPAA-eligible compliance
• Data encrypted in transit (TLS) and at rest

6. Third-Party Services

Your agent may interact with third-party services that you authorize (e.g., HubSpot, Salesforce, Stripe, Google Ads, Slack). When the agent sends or retrieves data from these services, that data is subject to those services' own privacy policies. We encourage you to review the privacy practices of any third-party service you authorize.

We do not control how third-party services handle your data once it leaves our systems.

7. Data Retention

We retain Customer Data for the duration of your engagement plus 30 days. Upon termination, we will provide all Customer Data in a reasonable format and delete our copies within 30 days, unless retention is required by law.

Contact information from consultation requests is retained for legitimate business purposes and can be deleted upon request.

8. Your Rights

You have the right to:

• Access your data at any time through the agent or by request
• Export your data in a standard format
• Delete your data upon termination of the engagement
• Revoke access to any connected system at any time
• Request information about what data we hold and how it is processed

To exercise any of these rights, contact us at kurt@andr3w.ai.

9. International Transfers

The Service is hosted in the United States on Microsoft Azure. If you are located outside the United States, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer. If you require data residency in a specific region, please discuss this during your consultation.

10. Children's Privacy

The Service is designed for business use and is not directed at individuals under 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active customers of material changes at least 30 days before they take effect. The current version will always be available at this URL.