Privacy Policy

1. Who we are and what this covers

IntelFactor Systems LLC operates Infacsys at app.infacsys.com. This policy covers the Infacsys website and service, including account access, workspaces, AI research, outreach drafts and the buyer sourcing pilot. It explains how we handle personal information. Contact us at tony@intelfactor.ai about privacy or your information.

When a business provides information about other people, that business is responsible for having authority to provide it. Public sources and linked third-party websites have their own privacy practices.

2. Information we collect

• Account and access information: email address, name and profile image where supplied, sign-in provider identifiers, email verification status, sessions, workspace memberships, roles and invitations.
• Workspace content: websites and business descriptions you enter, confirmed profiles, purchase requests and specifications, research, public source citations, prospects, supplier shortlists, drafts, edits, approvals and help requests.
• Billing information: Stripe customer and subscription identifiers, subscription and trial status, and payment-related records. Stripe collects and processes payment details through its own checkout; Infacsys does not store full card numbers or card security codes.
• Service and security information: IP addresses and user-agent information used for sessions and abuse prevention, request limits, activity and audit records, errors, AI usage and cost records, and first-party events such as research views and checkout completion. We also record a signup source tag when supplied by an incoming link.
• Communications: information you send when requesting support, verification or help with quotes.

Research can include business information and contact details made public on source websites. Do not submit passwords, payment-card details, sensitive personal information or information you lack permission to share in research inputs.

3. Google sign-in data

Google sign-in is optional; email-code sign-in remains available. If you choose Google, we request only openid, email and profile. Google provides your account identifier, email address, verification status and basic profile information such as your name and profile image.

We use this information to authenticate you, create or link your Infacsys account, maintain sessions and identify your account within your workspaces. We store the linked provider identifier and authentication tokens returned by Google in our server-side account records. This login feature does not request offline access or refresh tokens, and does not request or access your Gmail messages, Google Calendar or Google Drive files.

We do not sell Google user data, use it for advertising, or use Google sign-in data to train AI models. Google authentication tokens are not sent to our AI research or search providers. Infacsys' use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements where applicable.

You can remove Google access through your Google Account connections. Revoking Google access does not automatically delete your Infacsys account, workspace content or an existing Infacsys session. Sign out to end that browser session, and contact us to request account or data deletion.

4. How we use information

We use information to operate accounts and workspaces; perform research you request; prepare drafts and source-based results; process subscriptions and trial eligibility; send login codes, invitations and requested service communications; respond to support and sourcing help requests; prevent abuse; diagnose problems; and meet legal obligations.

Workspace content is available to authorized members of that workspace. Owners and admins control invitations and have permissions that members do not, including draft approval and billing management. IntelFactor staff can review sourcing help requests across workspaces to provide the assistance requested.

Seller outreach drafts are not sent by Infacsys. Approval makes the exact draft version ready to copy or download. Buyer sourcing sends a help-request notification to IntelFactor when you request assistance; any supplier-contact assistance requires the scope you authorize.

5. Service providers and disclosures

We share information needed to deliver the relevant feature with service providers:

• Tencent Cloud: hosting and database infrastructure in Hong Kong, and transactional email delivery.
• Google: optional identity authentication under Google's own privacy terms.
• DeepSeek: processing research inputs, relevant public source text and draft context to generate AI results. Information you include in those inputs may be processed by DeepSeek.
• Tavily: research search queries and the resulting public-source information.
• Stripe: payment processing, billing and subscription management.
• Clay (Claydar): website analytics on our public pages: the home page, this policy and the terms. It doesn't run on the sign-in and sign-up pages or anywhere in the signed-in app. On those public pages, a script from Clay sends Clay details of your visit, such as the pages you view, your IP address, browser information and interactions with the page. Clay may use them to identify the organization or person visiting.

When Infacsys reads a public page for research, the site receives a request from our infrastructure. Company icons may be retrieved from DuckDuckGo's icon service using the company's public hostname. These requests do not include your Google authentication tokens.

Authorized personnel may access information for support, requested services, security and operations. We may disclose information where required by law, to protect rights or safety, or in connection with a business transfer subject to applicable law. We do not sell personal information or share it for cross-context behavioral advertising. Provider processing is also subject to the relevant provider's terms and privacy practices.

6. Cookies, local storage and measurement

We use authentication and security cookies to maintain sessions and protect login flows. Browser session storage keeps a pending website, business description or buyer request in the same tab while you sign in. It is consumed by onboarding and may also be cleared by closing the tab or clearing browser storage.

First-party funnel events are stored in our own database to understand service usage. Our public pages also load Clay's analytics script (Claydar), which may set its own cookies or similar identifiers and sends Clay the visit details described in section 5. Stripe and Google may use their own cookies when you visit their checkout or sign-in pages. Blocking essential cookies may prevent login from working.

7. Retention and security

We retain account and workspace records while needed to provide the service, maintain shared business records, prevent abuse, resolve disputes and satisfy legal or accounting obligations. Different record types have different retention needs; we do not promise that all information is automatically deleted after a single fixed period. Backup copies may remain until the applicable backup rotation completes.

We use access controls, workspace membership checks and server-side credential handling. No online service or transmission method can be guaranteed completely secure. Contact us if you suspect unauthorized access.

8. Your choices and privacy requests

Contact tony@intelfactor.ai to request access, correction, export or deletion of your personal information or account. There is currently no self-service account-deletion screen. We may need to verify your identity and authority, especially for shared workspace content. Retained legal records and other workspace members' legitimate records may limit what we can delete.

Depending on your location, you may also have rights to restrict or object to processing, receive portable information, withdraw consent, or complain to your local privacy regulator. We will consider and respond to requests under applicable law without discrimination for exercising applicable rights. Withdrawing Google access does not cancel a Stripe subscription; use the workspace billing portal or contact support about cancellation.

9. International processing and legal grounds

IntelFactor Systems LLC is based in the United States. Infacsys is hosted in Hong Kong, and our service providers may process information in other countries, including the United States and China. Your information may therefore be processed outside your country, where privacy laws may differ. Contact us for information about the arrangements applicable to your account and any legally required transfer safeguards.

Where a legal basis is required, we process information as necessary to provide the service or fulfill a contract, for legitimate interests such as service security and operation, to comply with law, or with consent where required. You choose whether to use Google sign-in.

10. Children and policy changes

Infacsys is a business service intended for adults, not children under 18. If you believe a child has provided personal information, contact us.

We may update this policy as the service changes. The effective date above identifies the current version. We will provide additional notice of material changes where required. See also our Terms of Service.