Legal

Privacy Policy

Effective Date: January 1, 2026

PrimeVitas AI ("PrimeVitas," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect information when you use our AI verification API and related services (the "Service"). We are a B2B infrastructure provider — we do not sell your data, we do not retain your documents, and we do not use your verification content for any purpose beyond processing your request.

Information We Collect

We collect only what is necessary to provide and operate the Service:

• Account information — name, email address, company name, and billing information provided when you register or request API access.
• API credentials — API keys issued to your account for authentication. Treat these as passwords.
• Usage logs — timestamps, endpoint called, verdict returned (PASS/FAIL/WARNING), latency, and API key identifier. We do not log the content of your submitted documents or text.
• Billing data — monthly verification counts per API key for plan enforcement and invoicing.
• Communications — emails or messages you send us directly.

What We Do Not Collect

We do not retain the text, documents, or data you submit for verification. Your legal briefs, medical records, financial transactions, and autonomous vehicle inputs are processed in memory and discarded immediately after a verification result is returned. We have no record of the content you verified — only that a verification occurred.

How We Use Your Information

• To authenticate API requests and enforce plan limits
• To provide usage statistics and billing through your account dashboard
• To monitor system health, detect abuse, and maintain service reliability
• To respond to support inquiries
• To send service-related communications (downtime notices, policy changes)

We do not use your information for advertising, and we do not sell or share your data with third parties for their marketing purposes.

Data Security

We take security seriously. Our infrastructure is built on AWS private cloud with the following protections:

• AES-256 encryption at rest for all stored data
• TLS 1.3 encryption in transit for all API communications
• API key authentication required on all non-health endpoints
• No public container images — private registry with scan-on-push
• Network isolation via security groups; container accessible only through load balancer

No system is impenetrable. We will notify affected customers promptly in the event of a data breach involving personal information.

Data Retention

Account and billing information is retained for the duration of your account and for seven years thereafter for tax and legal compliance. Usage logs (excluding content) are retained for 30 days in CloudWatch and may be retained longer in aggregate, anonymized form for capacity planning. You may request deletion of your account data at any time.

Third-Party Services

We use a limited number of third-party services to operate the Service, including cloud infrastructure (AWS) and payment processing. These providers are bound by their own privacy policies and data processing agreements. We do not share your data with third parties beyond what is necessary to provide the Service.

Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal information. To exercise any of these rights, contact us at info@primevitas.ai. We will respond within 30 days.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email to registered users and by posting a notice on our website. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.