Privacy Policy

What stays on your computer

The MajeedAI desktop app runs your AI team on your own computer. These stay there and are not sent to MajeedAI:

• Your repositories and the files the team reads or writes. Only the part of your work an AI needs for a task is sent to that AI, and only to an AI you allowed.
• Your AI sessions in the desktop app: prompts, plans, output and reviews.
• Provider keys you keep only on your device, held in your operating system's secure storage.
• Your sign-ins to AI accounts that require sign-in on your own device, and your local AI.

What goes through MajeedAI's servers

Some features work through MajeedAI's servers. When you use them, this is what happens to your data:

• Web chat with MajeedAI's own AI: what you write is sent through MajeedAI's servers to the AI services MajeedAI runs or contracts to answer it, and every answer says which ones took part. MajeedAI keeps no history of what you wrote or of the answer. It records that the request happened: who asked, which AI services answered, the size of the request and the answer, the cost and the time taken. You accept MajeedAI's own AI terms once before it answers, and you can withdraw that any time.
• Web chat with your own key: if you keep a key in the cloud vault, your message is sent through MajeedAI's servers to that provider, which answers under its own terms. MajeedAI keeps no history of the message or the answer; its servers log which provider and model answered, the size and the time taken.
• Your chats on the web are kept in your browser, not on MajeedAI's servers.
• MajeedAI keeps no chat history. While an answer is being written, a copy of it is held for a short time on MajeedAI's servers, so a browser that loses its connection can resume it: the answer's text, its token counts, any tool requests the AI made and, for a chat with a vault key, that key's last four characters. Never what you wrote. That copy is deleted automatically about 1 minute after the answer is finished (never more than 3 minutes), or 3 minutes after its last update if it stops unfinished.
• The cloud key vault is optional and off unless you choose it for a key. If you do, an encrypted copy of that key is stored on MajeedAI's servers, with its last four characters, when it was added and when it was last used, so the web can use it while your computer is offline. You can delete one key or all of them at any time.
• Web control of your computer: messages between your browser and your computer pass through MajeedAI's relay, encrypted end to end so that MajeedAI cannot read them.
• "Needs you" alerts from your computer are off unless you turn them on (or, for a company's computers, its owner or an admin does). When on, your computer tells MajeedAI only the id of a step or task and whether it needs you, finished or failed, never its title, files, messages or code, so a browser notification or an email can reach you while MajeedAI is closed. MajeedAI keeps that record so the same alert is not sent twice.
• Proof sync is off unless you turn it on in the desktop app. When it is on, each proof record is encrypted on your computer with your proof key, which is never sent to MajeedAI, so MajeedAI cannot read it. MajeedAI's servers keep that encrypted copy with what they need to list and expire it: its session and record ids, when it was made and uploaded, its size and the signature status your computer reports. A record is deleted automatically when your plan's period ends (30 days on Free, up to 2 years on a paid plan; the Proof page shows yours), or sooner when you delete it. If you make a share link for a record, MajeedAI keeps a protected form of the link (never the part that opens the record), when it expires and how often it was opened.

What MajeedAI keeps about your account

To run your account, MajeedAI keeps:

• Your email address, your name, a protected form of your password (never the password itself) and your sign-in security settings.
• Your organizations, members, roles, plan and, for a team, the billing details you give (name, country, billing email, address and tax number).
• Licenses and the devices that activated them.
• The version of these terms you accepted and when.
• With usage reporting turned on by your organization, monthly counts and provider cost from each desktop. Usage reports never include code, prompts or file paths.
• A record of important actions in your organization, so that changes can be checked later.
• Help and support requests you send: the subject, what you write, the replies, your email address, the organization you named and up to 3 files you attach (2 MB each). A file keeps everything in it, such as a screenshot or a log, so leave out anything you do not want MajeedAI to hold. Diagnostics only if you tick the box: the app version, browser, operating system, the page's address, time zone, language and screen size. MajeedAI support staff can read your requests. They are kept as long as your account exists.
• Answer ratings: your thumbs up or down, who answered and any comment you add, never the question or the answer. They are kept as long as your account exists.

Payments and email

Payments are handled by the billing provider; MajeedAI does not see or keep your card details. MajeedAI sends email to confirm your address, reset your password and tell you about your account.

Your choices

• Delete keys from the cloud vault at any time, one or all.
• Delete your synced proof records at any time, one or all, and revoke a share link before it expires.
• Withdraw your acceptance of MajeedAI's own AI terms; MajeedAI's AI then stops answering until you accept again.
• Use only the desktop app and keys kept on your device, so your requests never pass through MajeedAI's servers.
• An organization's owners can turn usage reporting off.

Changes

When this policy changes, its version changes, and you are asked to accept the new version.