Privacy Policy

Acuon Analytics, LLC (“Acuon,” “we,” “us”) is a decision-intelligence firm based in Richmond, Virginia. We operate this website and the Acuon platform — a workspace where client organizations receive analysis, manage data, and work with an AI assistant. This policy explains what information we handle and how. If your organization has a signed agreement with Acuon (for example a services agreement or non-disclosure agreement), that agreement governs our handling of your organization’s data wherever it is more specific than this policy.

Account information. Name, email address, username, and profile details you provide when an account is created for you.

Workspace content. The data, documents, reports, and messages that you or your organization put into the platform, or authorize us to bring in on your behalf.

Connected accounts. If you connect a third-party account (such as Google Workspace), we access only the data covered by the permissions you grant, and only to provide the features you use.

Usage and log data. Standard technical logs (such as IP address, browser type, and actions taken in the platform) used for security, auditing, and keeping the service working.

We use only essential cookies — the ones required to keep you signed in. We do not run third-party advertising trackers.

To provide and operate the service; to prepare the analysis your organization engaged us for; to secure the platform and audit changes; to communicate with you about the service; and to meet legal obligations. We do not sell personal information, and we do not use your information for third-party advertising.

The platform’s assistant features are powered by third-party AI infrastructure providers (currently Anthropic; potentially additional cloud AI providers such as AWS). When you use these features, the content needed to answer — your prompt and relevant workspace context — is processed by those providers under API terms that do not permit them to use your data to train their models. Acuon does not use your content to train generative AI models. Actions the assistant takes in your workspace are logged and auditable.

If you connect Google Workspace, we access Google user data (such as Drive files, Sheets, Docs, Forms, Calendar, and Gmail — reading, organizing, and drafting — depending on the permissions you approve) solely to provide user-facing features you request — for example, reading a file you point the assistant at, or creating a document you asked for. We do not transfer Google user data to third parties except as necessary to provide those features, comply with law, or as part of a merger or acquisition with equivalent protections; we do not use it for advertising; and we do not sell it. Humans do not read this data except with your permission, for security purposes, or to comply with law. You can revoke Acuon’s access at any time at myaccount.google.com/permissions. Acuon’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We share data only with the service providers that run the platform, each for a specific role: Supabase (database, authentication, storage), Vercel (hosting), Cloudflare (network, DNS, file storage), Anthropic (AI processing), Google (the Workspace integration you connect), and Tavily (web search when research requires it). These providers are bound by terms at least as protective as our commitments to you. We may also disclose information if required by law. We do not sell data.

We keep workspace content for as long as your organization’s engagement is active. When an engagement ends, your organization can export its data, and we delete our copies of client source data on the schedule in the governing agreement (or on request), except where law requires longer retention. Account records are kept as needed for legitimate business and legal purposes.

Client workspaces are isolated with database-enforced row-level security; sign-in uses one-time email codes rather than passwords; traffic is encrypted in transit and data is encrypted at rest by our infrastructure providers; and assistant writes are audited. A fuller description is on our Security page.

You can request access to, correction of, export of, or deletion of your personal information by emailing us. We will respond within a reasonable time, and in accordance with applicable law (including, for Virginia residents, the Virginia Consumer Data Protection Act).

The service is for organizations and their adult users. It is not directed to children under 16, and we do not knowingly collect their information.

We will post any changes to this policy on this page and update the date above. Questions and requests: info@acuon.com.