Privacy Policy

Introduction

At RedfishGo, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our AI-powered module creation platform and related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.

This Privacy Policy is effective as of December 19, 2024, and applies to all users of RedfishGo. We may update this policy from time to time, and we will notify you of any material changes by posting the new Privacy Policy on this page.

Information We Collect

We collect information that you provide directly to us and information that is automatically collected when you use the Service. The types of information we collect include:

Registration Data

When you create an account, we collect:

• Email address: Used for account identification and communication
• Password: Securely hashed and stored by AWS Cognito (we never have access to your plain-text password)
• Name: Your display name for your account

User Profile Data

We store your profile information, including:

• Your name and email address
• Your account registration date
• Your storage usage information

This profile data is stored securely in AWS S3 at {userId}/profile.json.

Content Data

When you create modules using our Service, we collect and store:

• Module files: HTML, CSS, and JavaScript code for your modules
• Uploaded resources: Images, videos, and documents you upload for your modules
• Module metadata: Module names, descriptions, creation dates, and version information

Module files and resources are stored in AWS S3, while module metadata is stored in AWS DynamoDB.

Usage Data

We collect information about how you use the Service, including:

• Conversation sessions: Chat history and conversation context when you interact with our AI assistant
• Research queries: Topics and queries you submit for content research
• Service interactions: Actions you take within the Service, such as module creation, editing, and export

Conversation sessions are stored in AWS DynamoDB with a 24-hour time-to-live (TTL) for automatic cleanup of inactive sessions.

Contact Form Data

When you submit a contact form, we collect:

• Your email address
• Your message content

This information is forwarded to Asana for customer support management and is not stored in our databases.

How We Store Your Data

We use industry-standard cloud services to securely store your data:

AWS S3 (Simple Storage Service)

We store the following data in AWS S3:

• User profiles: Stored at {userId}/profile.json, containing your name, email, and registration date
• Module files: HTML, CSS, and JavaScript files for your modules stored at {userId}/modules/
• Module resources: Images, videos, and documents you upload for your modules

AWS DynamoDB (Database)

We store the following data in AWS DynamoDB:

• Module metadata: Module names, descriptions, creation dates, version information, and module structure data
• Conversation sessions: Chat history and conversation context with a 24-hour TTL for automatic cleanup

AWS Cognito (Authentication)

Your authentication data (email and hashed password) is managed and stored by AWS Cognito, which provides secure user authentication and management. We do not have access to your plain-text password.

Data Retention

We retain your data for as long as your account is active or as needed to provide you with the Service. Specifically:

• Account data: Retained until you delete your account
• Module data: Retained until you delete the module or your account
• Conversation sessions: Automatically deleted after 24 hours of inactivity
• Contact form submissions: Forwarded to Asana and not stored in our systems

When you delete your account, we will delete all associated data from our systems, including your profile, modules, and resources, in accordance with our data deletion procedures.

How We Use Your Data

We use the information we collect to:

• Provide and maintain the Service: Authenticate your account, store your modules, and deliver AI-powered content generation features
• Process your requests: Generate modules based on your descriptions, perform content research, and create customized content
• Improve the Service: Analyze usage patterns to enhance functionality, fix bugs, and develop new features
• Communicate with you: Respond to your contact form submissions and provide customer support
• Ensure security: Monitor for fraudulent activity, protect against security threats, and enforce our Terms of Service

AI Content Generation

When you request AI-generated content, your content, descriptions, and research queries may be sent to Google Gemini AI for processing. Google's use of this data is governed by their privacy policy and terms of service.

Content Research

When you use our content research features, your research queries are sent to Serper API to perform web searches. Serper's use of this data is governed by their privacy policy and terms of service.

Customer Support

When you submit a contact form, your email and message are forwarded to Asana for customer support management. Asana's use of this data is governed by their privacy policy and terms of service.

Third-Party Services

We use third-party services to provide and improve the Service. These services may have access to your information as necessary to perform their functions. We require these services to maintain the confidentiality of your information and to use it only for the purposes for which we disclose it to them.

AWS Services

• AWS Cognito: Provides user authentication and user management. Your email and hashed password are stored by AWS Cognito in accordance with AWS's privacy policy.
• AWS S3: Stores your user profiles, module files, and uploaded resources. Data is stored in AWS data centers in accordance with AWS's privacy policy and security practices.
• AWS DynamoDB: Stores module metadata and conversation sessions. Data is stored in AWS data centers in accordance with AWS's privacy policy and security practices.

Google Gemini AI

We use Google Gemini AI to generate content for your modules. When you request AI-generated content, your content, descriptions, and research queries may be sent to Google's servers for processing. Google's use of this data is governed by Google's Privacy Policy.

Serper API

We use Serper API to perform web searches for content research. When you use our research features, your search queries are sent to Serper's servers. Serper's use of this data is governed by their privacy policy and terms of service.

Asana

We use Asana to manage customer support requests. When you submit a contact form, your email and message are forwarded to Asana for task creation and support management. Asana's use of this data is governed by Asana's Privacy Policy.

We do not sell, rent, or share your personal information with third parties for their marketing purposes. We only share information with third-party services as necessary to provide the Service.

Your Privacy Rights

You have certain rights regarding your personal information, including:

Right to Access

You have the right to access the personal information we hold about you. You can view your profile information, modules, and account data through your account dashboard.

Right to Deletion

You have the right to request deletion of your account and all associated data. You can delete your account through your profile settings, or by contacting us through the contact form. Upon deletion, we will remove your profile, modules, resources, and all associated data from our systems.

Right to Correction

You have the right to correct inaccurate or incomplete information in your account. You can update your profile information, including your name and email address, through your account settings.

Right to Data Portability

You have the right to export your data. You can export your modules as production-ready files through the Service's export features.

How to Exercise Your Rights

To exercise any of these rights, you can:

• Use the account settings and features in the Service
• Contact us through the contact form on our website
• Email us at the address provided in the Contact Us section

We will respond to your request within a reasonable timeframe and in accordance with applicable data protection laws.

Cookies and Tracking

We use session storage and local storage to maintain your session and improve your experience with the Service. We do not currently use cookies for tracking or analytics purposes.

Session Storage

We use browser session storage to maintain your authentication state and conversation sessions while you are using the Service. This data is automatically cleared when you close your browser.

Managing Storage

You can manage session and local storage through your browser settings. Note that clearing this storage may require you to log in again and may affect your Service experience.

Data Security

We implement industry-standard security measures to protect your data:

Encryption

• Data in transit is encrypted using TLS (Transport Layer Security)
• Data at rest is encrypted using AWS encryption services
• Passwords are hashed using secure algorithms managed by AWS Cognito

Access Controls

• Access to your data is restricted to authorized personnel only
• User authentication is required for all data access operations
• Data is isolated by user ID to prevent unauthorized access

AWS Security Practices

We leverage AWS's security infrastructure, including:

• AWS's data center security and compliance certifications
• Regular security audits and monitoring
• Automated backup and disaster recovery systems

Password Security

Your password is never stored in plain text. Passwords are hashed using secure algorithms managed by AWS Cognito, and we never have access to your actual password.

While we implement strong security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your data to the best of our ability.

Children's Privacy

The Service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately so we can delete such information.

If we become aware that we have collected personal information from a child under 18 without verification of parental consent, we will take steps to delete that information from our servers.

Changes to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated Privacy Policy on this page
• Updating the "Last Updated" date at the bottom of this page
• Providing notice through the Service or via email for significant changes

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with the changes, you should stop using the Service and may delete your account.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Through the contact form on our website at redfishgo.com
• By emailing us at the address provided in our Terms of Service

We will respond to your inquiry within a reasonable timeframe and in accordance with applicable data protection laws.