Effective Date: April 1, 2026
Last Updated: April 1, 2026
CoreShift AI (“Company,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (coreshiftai.com), use our services, or interact with our AI systems.
1. Information We Collect
Information You Provide
- Contact information: Name, email address, phone number, company name, and job title when you fill out forms, request demos, or contact us.
- Account information: Login credentials and preferences if you create an account to manage your AI bot deployments.
- Business data: Information you provide during onboarding, including workflow descriptions, integration credentials, and organizational data needed to configure your AI solutions.
- Communication data: Emails, chat messages, and call recordings when you communicate with our support team.
Information Collected Automatically
- Usage data: Browser type, IP address, pages viewed, time spent on pages, referring URL, and device information.
- Cookies and tracking: We use cookies and similar technologies for site functionality, analytics, and advertising. See Section 6 for details.
AI Interaction Data
- Bot interaction logs: When your deployed AI bot interacts with your customers or employees, we process conversation data to deliver the service and improve bot performance.
- Training data: Documents, manuals, and other materials you provide for knowledge base and custom LLM deployments are processed exclusively for your deployment and are not used to train models for other clients or public models.
2. How We Use Your Information
- To provide, operate, and maintain our AI services
- To process your requests and manage your account
- To improve and optimize our services and user experience
- To send administrative communications (service updates, security alerts)
- To send marketing communications (with your consent; you may opt out at any time)
- To comply with legal obligations and enforce our terms
- To detect, prevent, and address fraud and security issues
3. AI-Specific Data Processing
We do not use your business data to train public AI models. Your proprietary documents, conversation logs, and business data are used exclusively to provide and improve your specific AI deployment. Data isolation is maintained between client environments.
For knowledge base and custom LLM deployments, your data is stored in isolated environments with encryption at rest (AES-256) and in transit (TLS 1.3). On-premise deployment options are available for clients requiring complete data sovereignty.
4. How We Share Your Information
We do not sell your personal information. We may share information with:
- Service providers: Cloud infrastructure (AWS), analytics tools, and email delivery services that process data on our behalf under strict contractual obligations.
- AI model providers: Certain bot functions may use third-party language model APIs (e.g., OpenAI, Anthropic). Data sent to these providers is subject to their data processing agreements, which prohibit use of your data for model training.
- Legal compliance: When required by law, regulation, or legal process.
- Business transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users.
5. Data Retention
We retain your information for as long as your account is active or as needed to provide services. Upon termination, we will delete or anonymize your data within 90 days, unless retention is required by law. You may request earlier deletion by contacting us.
6. Cookies and Tracking
We use:
- Essential cookies: Required for site functionality (always active).
- Analytics cookies: To understand site usage patterns (Google Analytics). You may opt out via browser settings or our cookie consent tool.
- Marketing cookies: To deliver relevant advertising (only with consent).
7. Your Rights
For All Users
- Access, correct, or delete your personal information
- Opt out of marketing communications
- Request a copy of your data in portable format
For California Residents (CCPA/CPRA)
You have the right to know what personal information we collect, request deletion, opt out of the sale or sharing of personal information (we do not sell your data), and not be discriminated against for exercising these rights.
For EU/EEA Residents (GDPR)
Our legal basis for processing includes contract performance, legitimate interest, and consent. You have the right to access, rectification, erasure, restriction, portability, and to lodge a complaint with your local supervisory authority.
8. Security
We implement industry-standard security measures including encryption, access controls, regular security audits, and SOC 2 compliant infrastructure. No system is 100% secure, but we take reasonable and appropriate measures to protect your data.
9. Children’s Privacy
Our services are not directed to individuals under 16. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this policy periodically. We will notify you of material changes via email or a prominent notice on our website at least 30 days before changes take effect.
11. Contact Us
For privacy questions or to exercise your rights:
CoreShift AI
Email: darrin@coreshift.technology
Phone: (619) 672-4664
San Diego, CA