Privacy Policy

1. Who We Are

Achromic ("we") operates www.achromic.ai, an AI-powered polling platform. For account and billing data of our customers, we act as a data controller. For respondent contact data and survey responses that our customers collect through the platform, we act as a data processor on the customer's behalf.

2. Information We Collect

• Account data: name, email, company, password hash, and settings.
• Poll content: questions, audiences, and configurations our customers create.
• Respondent data: contact details (such as name, email, phone number) uploaded or synced by customers, and survey responses — including call recordings and transcripts where the AI voice channel is used, and message logs for SMS and email.
• Usage data: log data, device and browser information, and product analytics.
• Billing data: processed by Stripe. We do not store full card numbers.

3. How We Use Information

• To operate the platform: create and distribute polls, collect responses, and generate AI analysis.
• To run AI features (poll generation, response extraction, thematic analysis, reports) via our AI subprocessors.
• To send transactional messages, provide support, prevent fraud and abuse, and comply with law.
• We do not sell personal information, and we do not use respondent data to train our own or third-party foundation models.

4. Subprocessors

We share data only as needed to run the service, with: Vercel and Railway (hosting), PostgreSQL managed hosting, Stripe (payments), SendGrid (email), Twilio (SMS), Vapi (AI voice calls), Anthropic (AI analysis), panel providers you choose (Prolific, Cint, Dynata), and integrations you connect (HubSpot, Mailchimp, Slack, Microsoft Teams). Each receives only the data required for its function.

5. Communications & Consent

Customers who upload contact lists are responsible for having the required consent to contact those people (see our Terms). We honor opt-outs across channels: reply STOP to SMS, unsubscribe links in email, and verbal opt-out during voice calls. Opted-out contacts are suppressed from future outreach.

6. Retention

Account data is kept while your account is active and deleted or anonymized within 90 days of a verified deletion request. Respondent data and responses are retained per our customers' instructions and deleted when a customer deletes a poll or closes their account, subject to short backup windows and legal obligations.

7. Security

Data is encrypted in transit (TLS) and at rest, access is restricted and authenticated (JWT, hashed passwords, role-based access), and payment data is handled by Stripe. No method of transmission is 100% secure; we notify affected users of breaches as required by law.

8. Your Rights

Depending on your location (including under GDPR and CCPA/CPRA), you may have rights to access, correct, delete, export, or restrict processing of your personal data, and to object to processing. Respondents may also contact the organization that ran the poll, which controls that data. To exercise rights, contact us at privacy@achromic.ai. California residents: we do not sell or share personal information as defined by the CPRA.

9. International Transfers

We may process data in the United States and the European Union. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.

10. Children

The service is not directed to children under 16, and we do not knowingly collect their data.

11. Changes & Contact

We will post any changes to this policy here and update the date above. Questions or requests: privacy@achromic.ai.