Privacy Policy

1. Who We Are

Inetta AI (“Inetta,” “we,” “us”) is operated by Xtrasomatic, LLC (dba Inetta AI). We are responsible for the personal information described in this policy. You can reach us at team@inetta.ai.

2. Information We Collect

Account information: Your name, email address and password when you create an account. We store your password only as a secure hash. We also keep whether your email is verified, when you signed up and last signed in, and your notification settings.

What you write: The messages you send in your personal space and in shared spaces (couples, family or friends), the names of your spaces, and invitations you send, including the invitee’s email address. Inetta keeps short notes on each space (who is there, what keeps coming up, what has helped) so it can remember earlier conversations.

Drafts: When you press send in a shared space, your draft is checked for tone before it is posted. We don’t save a draft unless you send it.

Website demo: The messages you write in the demo on our website. A demo expires after 24 hours and is deleted unless you sign up within that time, in which case it moves to your personal space.

Profile photos: A photo you upload for your profile. Profile photos and the images in our articles are public files: anyone who has a file’s web address can see it. The address is long and random and we don’t list it anywhere, but we show your photo to the people in your spaces. These files are marked to be cached for up to a year, so after we delete one, a copy may stay in browser or network caches until that time runs out.

Payments: Stripe processes your card and billing details; we never see or store your full card number. We keep your plan, subscription status and the identifiers Stripe gives us.

Newsletter: Your email address, and the time and IP address of your confirmation, if you subscribe.

Push notifications: If you turn them on, the address your browser gives us for delivering notifications.

Device and usage information: The IP address and browser of each signed-in session, kept for security. Analytics events about how the website and app are used (such as pages viewed, buttons used and messages sent, never what a message says), and session recordings of how pages are used. In the app, recordings hide all text and everything typed; on the website, they hide the demo conversation. Error reports and server logs.

Cookies and similar storage: A cookie that keeps you signed in, a cookie for your website demo, and analytics cookies and browser storage set by PostHog. You can block analytics in your browser; Inetta still works without them.

3. How We Use Your Information

To run Inetta: to answer your messages, keep each space’s notes, deliver notifications and emails you ask for (such as email verification and password resets), and manage your subscription.

To keep Inetta safe and working: to prevent abuse and fraud, limit sign-in attempts, investigate errors and secure accounts.

To understand and improve Inetta: to see which features are used and where people have trouble. We measure whether emails without one-time links are opened; emails that contain sign-in, verification, reset or invitation links are never tracked.

To send our newsletter, only if you subscribe and confirm. Every newsletter has an unsubscribe link.

We do not sell your personal information, share it for targeted advertising, or use your conversations to train AI models.

4. Inetta’s AI and Your Messages

Inetta’s replies, its notes on each space, its check of whether to reply in a shared space, and the tone check of drafts are made by OpenAI’s AI models. To do this, we send OpenAI the relevant messages, notes and drafts, and the first names of the people in the space.

Each request stands on its own: we keep no conversation at OpenAI. OpenAI states that it does not use data sent through its API to train its models unless the customer opts in, and that it may keep what it receives for up to 30 days to monitor for abuse. We have no zero-data-retention arrangement with OpenAI. If we add another AI provider, we will list it here before your messages are sent to it.

AI can make mistakes. Inetta is not a therapist and not an emergency service; see our Terms of Service.

5. Service Providers

We share information with these service providers, which process it to run Inetta for us:

• Render: our servers and database.
• Vercel: hosting of our website and web app.
• Cloudflare: storage of profile photos and other uploads, storage of our database backups, and our domain’s DNS.
• PostHog: product analytics, session recordings, error reports, server logs, and delivery of our emails, including the newsletter.
• OpenAI: Inetta’s AI (section 4).
• Stripe: payments and subscriptions.
• Google Workspace: our team email, when you write to us.
• Your browser’s push service (for example Apple, Google or Mozilla), which delivers push notifications if you turn them on.

Legal requirements: We may disclose information if the law requires it, or to protect the safety, rights or property of our users, the public or Inetta.

Business transfers: If Inetta is involved in a merger, acquisition or sale of assets, your information may transfer as part of it, and this policy will continue to apply to it.

6. How Long We Keep Information

We keep your account and messages while your account exists. When you delete your account, we delete your personal space, your profile and your sessions, cancel your subscription, and delete your analytics profile and events at PostHog. Messages you wrote in shared spaces stay visible to the other members, shown as written by a former member, and the space’s notes are rewritten.

Some copies last longer: database backups are kept for up to 90 days, and our hosting provider keeps point-in-time recovery data for 7 days. Records of sent emails, used for rate limits, are kept for 7 days. Server logs, error reports and analytics are kept in PostHog for the retention period of our PostHog plan, except that deleting your account deletes your analytics profile and its events. Stripe keeps payment records as the law requires. A confirmed newsletter subscription continues after you delete your account until you unsubscribe.

7. Security

We use encryption in transit, hashed passwords, and access limited to the people who need it, with two-factor authentication for administrators. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Your Choices and Rights

You can update your name, email and password, change notification settings, leave shared spaces, cancel your subscription and delete your account in the app’s settings. You can unsubscribe from the newsletter with the link in any issue.

You can ask us for a copy of your information, or to correct or delete it, by writing to team@inetta.ai. Depending on where you live, you may have further rights, such as to object to or restrict some processing, or to complain to a data protection authority. We will respond as the law requires.

9. Children

Inetta is for adults 18 and older. We do not knowingly collect information from children. If you believe a child has given us personal information, contact us and we will delete it.

10. Where Your Information Is Processed

Our servers and database are hosted by Render in Virginia, United States. Our other providers may process information in other places, under their own terms. If you use Inetta from outside the United States, your information is transferred to the United States.

11. Changes to This Policy

We may update this policy. We will post the new version here with its date, and tell you by email or in the app before a material change takes effect.

12. Contact Us

Questions about this policy or your information: Xtrasomatic, LLC (dba Inetta AI), team@inetta.ai.