Privacy Policy

Effective Date: 5/8/2026

Annuit (“the Service”) is a software-as-a-service (SaaS) platform provided by Xaac, LLC, an Arizona Limited Liability Company (“we,” “our,” or “us”). This Privacy Policy explains how we collect, use, store, and protect personal information and other data in connection with the use of Annuit.

1. Information We Collect

a. Information Provided by Users

We collect the following information directly from users:

Account Information: Name, email address, company name, and other information provided during account creation via Supabase.
Customer Content: Documents and related metadata processed by the Annuit desktop client or web application may be stored in Supabase and processed by LlamaIndex, LlamaCloud, and Anthropic for parsing, analysis, extraction, classification, chat, organization, and structured storage as part of the Service. Annuit personnel do not manually review or access uploaded documents except as required for support or troubleshooting with user consent.
Billing Information: Payment method details, invoices, subscription status, and related billing records are processed by Stripe. We do not store full payment card numbers on Annuit systems.

b. Automatically Collected Information

We collect certain data automatically when you use Annuit, including:

Usage data (e.g., interactions with the website and desktop app, timestamps, and accessed features).
Device information (e.g., browser type, operating system).
IP address.
Error, crash, trace, browser, device, user/session, and diagnostic context from the production web and desktop applications.
Desktop download and update request metadata, such as IP address, app version, operating system, architecture, and request timestamps.

c. Local Desktop Data

The Annuit desktop app may store data locally on your device, including settings, cached processing artifacts and sidecars, pending checkout state, model registry cache, and other local application state. Some desktop data remains on your device and is not centrally controlled by Annuit unless it is uploaded or synced through the Service.

d. Data from Third Parties

We may receive additional data from third-party providers, including authentication and authorization data managed via Supabase and billing or subscription data managed via Stripe.

2. How We Use Collected Information

We use the information we collect for the following purposes:

Providing the Service: To authenticate and authorize users, store uploaded documents and related records, process documents, and analyze documents for metadata extraction, classification, chat, and organization features.
Improving the Service: To analyze usage data and enhance functionality and user experience.
Operating and Securing the Service: To monitor production errors, crashes, traces, downloads, updates, abuse signals, and diagnostic context.
Communication: To respond to inquiries, provide support, and send notifications about updates or changes to the Service.
Compliance: To ensure compliance with legal obligations and terms of service.

3. Cookies and Analytics

Annuit may use cookies or similar technologies to collect usage data, improve website functionality, and analyze how the Service is used. You can control or disable cookies through your browser settings, though doing so may affect certain features of the Service.

4. Data Storage and Processing

a. Document Storage

Uploaded documents and related records are stored in Supabase-managed cloud infrastructure, with encryption applied both in transit and at rest.

b. AI and Document Processing

Supabase stores documents and metadata. We use LlamaIndex, LlamaCloud, and Anthropic to process uploaded documents and content and generate structured information that powers parsing, analysis, extraction, classification, chat, and organization features. These providers process data on our behalf for the limited purpose of providing Annuit. We do not permit LlamaIndex, LlamaCloud, or Anthropic to use your uploaded documents or other Content to train their general-purpose artificial intelligence models.

c. US Data Residency

For the core customer-content processing path, Annuit chooses responsible vendors for cloud storage and AI/document processing that commit customer content to remain in the United States. This applies to Supabase, LlamaIndex/LlamaCloud, and Anthropic for uploaded documents, extracted metadata, and AI/document processing content. This commitment does not necessarily apply to ancillary operational systems such as payments, error monitoring, desktop distribution, support email, or similar business tooling.

d. Authentication and Authorization

Supabase is used to manage authentication and authorization, ensuring secure access to the platform.

e. Payments

Stripe processes subscription payments, invoices, payment methods, tax and fraud-prevention signals, and related billing support data.

f. Error Monitoring

Sentry processes application error, crash, trace, browser, device, user/session, and diagnostic context to help us operate, troubleshoot, improve, and secure the Service.

g. Desktop Downloads and Updates

CrabNebula and CDN infrastructure serve desktop installers and update metadata. Desktop downloads and update checks may disclose request metadata such as IP address, app version, operating system, architecture, and request timestamps.

5. Data Sharing

We do not sell or rent your personal information. However, we may share data in the following circumstances:

Service Providers: With trusted third parties such as Supabase, LlamaIndex, LlamaCloud, Anthropic, Stripe, Sentry, and CrabNebula for the purposes described in this Privacy Policy.
Legal Compliance: To comply with applicable laws, regulations, or legal processes.
Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of Xaac, LLC's assets.

6. Data Security

We take reasonable measures to protect the security of your data. This includes:

Encryption of data in transit and at rest.
Access controls to limit who can access sensitive information.
Regular audits and monitoring of our security practices.

Despite our efforts, no system is completely secure, and we cannot guarantee the absolute security of your data.

7. User Rights

You have the following rights regarding your data:

Access and Correction: Request access to or correction of your personal information.
Data Deletion: Request the deletion of your personal information and uploaded documents.
Withdrawal of Consent: Withdraw consent to data processing where applicable.
California Privacy Rights: If you are a California resident, you may request access to, correction of, or deletion of personal information, and you may request information about our data practices. We do not sell your personal information.

To exercise these rights, contact us at support@annuit.com.

8. Retention of Data

We retain your personal data and uploaded documents for as long as necessary to provide the Service or comply with legal obligations. Upon account termination, data may be deleted or anonymized, subject to applicable legal or operational requirements.

9. Children's Privacy

Annuit is not intended for children under the age of 16, and we do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected personal data from a minor without verified parental consent, we will take steps to delete such information promptly.

10. Third-Party Services

Annuit relies on third-party services such as Supabase for cloud infrastructure, storage, and authentication; LlamaIndex/LlamaCloud and Anthropic for AI and document processing; Stripe for payments; Sentry for error monitoring; and CrabNebula for desktop downloads and updates. These providers have their own privacy policies governing their data handling practices. We encourage you to review these policies:

11. Consulting & AI Services Data Handling

This Privacy Policy governs the Annuit Service described above. Our engineering and AI consulting engagements are governed by a separate written agreement and statement of work, not by this Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting a notice on our website or contacting you directly. Continued use of Annuit after such updates constitutes acceptance of the revised policy.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data handling practices, please contact us at:

Xaac, LLC1635 W Lantana Ct.Chandler, AZ 85248support@annuit.com

By using Annuit, you acknowledge that you have read, understood, and reviewed this Privacy Policy.