Privacy Policy

This Privacy Policy describes how Thought Continua LLC ("Company," "we," "us," or "our"), operating as Rhazi.ai, collects, uses, and shares your personal information when you use our website, platform, and services. We are committed to protecting your privacy and handling your data responsibly.

1. Who We Are

Rhazi.ai is an AI automation services platform operated by Thought Continua LLC, a California limited liability company based in Los Angeles, California. We provide AI-powered business automation, a client dashboard, and the Agent-Ready Score tool.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name and email address when you create an account through our authentication provider (Clerk).
• Billing Information: Payment details processed through Stripe. We do not store credit card numbers, bank account numbers, or other sensitive payment data on our servers. Stripe handles all payment processing in accordance with PCI DSS standards.
• Contact Form Submissions: Name, email address, and message content when you reach out through our contact form.
• Score Tool Data: Website URLs you submit for analysis and, optionally, your email address when unlocking full reports.
• Dashboard Content: Tasks, calendar items, email drafts, social connections, and other content you create or manage within your client dashboard.

2.2 Information Collected Automatically

• IP Addresses: Collected for rate limiting on our Score tool and for general security purposes. IP addresses are stored temporarily and not linked to user accounts.
• Authentication Data: Session tokens and authentication state managed by our authentication provider (Clerk).

2.3 Information We Do Not Collect

We do not use analytics or tracking services. We do not deploy advertising cookies, pixel trackers, or behavioral profiling tools. We do not collect browsing history, device fingerprints, or cross-site tracking data.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process payments and manage subscriptions
• Authenticate your identity and secure your account
• Respond to your inquiries and support requests
• Deliver Agent-Ready Score analysis results
• Send service-related communications (account updates, billing notices)
• Enforce our Terms of Service and protect against fraud or abuse
• Comply with legal obligations

We do not sell your personal information. We do not use your data to train AI models. We do not share your information for advertising purposes.

4. Third-Party Service Providers

We use the following third-party services to operate our platform. Each processes data only as necessary to provide their specific function:

Each provider is contractually obligated to process data only for the purposes described above and to maintain appropriate security measures.

5. Data Sharing

We may share your information only in the following circumstances:

• Service Providers: With the third-party providers listed above, solely to operate our platform.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Protection of Rights: When necessary to protect the rights, safety, or property of Thought Continua LLC, our users, or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, in which case you will be notified of any change in ownership or control of your personal information.

We do not sell, rent, or trade your personal information to third parties.

6. Cookies and Tracking Technologies

We use only essential cookies required for our platform to function. We do not use analytics, advertising, or tracking cookies. For detailed information, see our Cookie Policy.

Current cookies used:

• Authentication cookies (Clerk): Required to maintain your login session. These are essential cookies that cannot be disabled while using authenticated features.
• Admin session cookie (rhazi-view-as-client-id): Used only by administrators for client account viewing. HttpOnly, secure, 4-hour expiry.

7. Your Privacy Rights (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with specific rights regarding your personal information:

• Right to Know: You may request that we disclose what personal information we have collected about you, the sources, the purposes, and the third parties with whom we have shared it.
• Right to Delete: You may request that we delete the personal information we have collected about you, subject to certain exceptions.
• Right to Correct: You may request that we correct inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising. No opt-out is necessary, but we honor Global Privacy Control (GPC) signals.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

To exercise any of these rights, email us at admin@rhazi.ai. We will respond to verifiable requests within 45 days.

8. Data Retention

• Active accounts: Your data is retained for as long as your account is active and you are using our services.
• After account closure: We will delete or anonymize your personal data within 90 days of account closure, unless retention is required by law or necessary for legitimate business purposes (such as resolving disputes).
• Score tool data: Cached score results are retained for performance optimization and may be purged periodically.
• Rate limiting data: IP-based rate limit records are temporary and periodically purged.
• Contact form submissions: Retained for as long as needed to respond to your inquiry, then deleted within 12 months.

9. Data Security

We implement industry-standard security measures to protect your information, including:

• Row-level security (RLS) on all database tables
• Encrypted connections (HTTPS/TLS) for all data transmission
• Timing-safe authentication for webhook endpoints
• Input validation and sanitization on all API endpoints
• No personal information stored in application logs
• Secure, HttpOnly cookies with strict SameSite policies

No system is 100% secure. While we take reasonable measures to protect your data, we cannot guarantee absolute security. In the event of a data breach, we will notify affected users and relevant authorities in accordance with California law (within 30 days of discovery).

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. For active subscribers, we will also send notice via email. We encourage you to review this policy periodically.

12. Contact Us

For questions or concerns about this Privacy Policy, or to exercise your privacy rights, contact us at:

• Email: admin@rhazi.ai
• Entity: Thought Continua LLC
• Address: 8605 Santa Monica Blvd PMB 416351, West Hollywood, CA 90069-4109