Privacy Policy

Effective Date: March 19, 2026

Lite Agentic Systems LLC ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, store, and protect your information when you use the Lite Agentic Systems platform ("Service").

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, company name, and role. This information is required to provision your workspace and provide the Service.

Financial Documents

When you use the Service to process tax documents (W-2s, 1099s, K-1s, and other financial forms), the content of those documents is processed by our AI extraction pipeline. This data may include personally identifiable information (PII) such as names, Social Security numbers, employer identification numbers, and financial figures.

Usage Data

We automatically collect information about how you use the Service, including pages visited, features used, API calls, error logs, and session duration. This data is used to improve the Service and diagnose issues.

Payment Information

Payment processing is handled by Stripe. We do not store credit card numbers or bank account details on our servers. Stripe's handling of your payment information is governed by their privacy policy.

2. How We Use Your Information

Purpose	Data Used	Legal Basis
Provide the Service	Account info, uploaded documents	Contract performance
AI document extraction	Financial documents	Contract performance
Billing and payments	Account info, payment data (via Stripe)	Contract performance
Service improvement	Aggregated usage data (never individual documents)	Legitimate interest
Security and fraud prevention	IP addresses, access logs	Legitimate interest
Customer support	Account info, usage data	Contract performance

3. AI Processing

Our Service uses AI models (including Anthropic's Claude) to extract structured data from financial documents. Key points about AI processing:

• Your documents are not used to train AI models. Document content is processed for extraction only and is not retained by our AI providers for model training.
• AI-extracted data is stored in your isolated tenant database, accessible only to authorized users in your workspace.
• We use AI providers' APIs in a stateless manner; they do not retain your document content after processing.

4. Data Storage and Security

• Tenant isolation: Each customer's data is stored in a separate, isolated database. There is no data commingling between tenants.
• Encryption: Data is encrypted in transit (TLS 1.2+) and API keys are encrypted at rest using AES-256-GCM.
• Access controls: Role-based permissions (owner, admin, member, viewer) restrict data access within your workspace.
• Infrastructure: The Service is hosted on DigitalOcean infrastructure in the United States.
• Backups: Database backups are performed regularly and stored securely.

5. Data Retention

We retain your data for as long as your account is active. Upon account termination:

• You may request a data export for up to 30 days after termination.
• After 30 days, your data is permanently deleted from our systems.
• Aggregated, anonymized usage statistics may be retained indefinitely.
• Billing records are retained as required by applicable tax and accounting regulations.

6. Data Sharing

We do not sell your data. We share data only in these limited circumstances:

• Service providers: We use third-party services to operate the platform (Stripe for payments, Anthropic for AI, DigitalOcean for hosting, Cloudflare for security). These providers process data only on our behalf and under contractual obligations.
• Legal requirements: We may disclose data if required by law, subpoena, or government request.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Delete your personal data (subject to legal retention requirements)
• Export your data in a portable format
• Object to certain processing activities

To exercise these rights, contact us at [email protected].

8. Cookies and Tracking

We use session cookies to maintain your login state. We do not use third-party advertising trackers. We may use basic analytics to understand usage patterns, but we do not build behavioral profiles or sell data to advertisers.

9. Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service at least 14 days before they take effect.