Privacy Policy

1. Introduction

Circ AI ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered circuit design platform (the "Service").

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide Directly

• Circuit Descriptions: Natural language descriptions of circuits you want to design
• Chat Messages: Conversations with our AI assistant for circuit refinement
• Uploaded Netlists: SPICE netlists you upload or create
• Contact Information: Email address if you contact us for support

2.2 Information Collected Automatically

When you access the Service, we automatically collect certain information, including:

• Device Information: Browser type, operating system, device type
• Usage Data: Pages visited, features used, time spent on the Service
• Log Data: IP address, access times, referring URLs
• Cookies: Session cookies for functionality (see Section 8)

2.3 Categories of Personal Information (California Residents)

In the last 12 months, we have collected the following categories of personal information:

3. How We Use Your Information and Legal Basis

We use the information we collect for the purposes below. For users in the EEA, UK, and Switzerland, we also identify the legal basis for each processing activity:

4. How We Share Your Information

4.1 Third-Party Service Providers

We share information with the following categories of service providers who process data on our behalf:

Important - Anthropic Data Processing: When you submit circuit descriptions, they are transmitted to Anthropic's API for processing by Claude. Anthropic does not use API inputs or outputs to train their models. For more information, see Anthropic's Privacy Policy and Usage Policy.

4.2 Other Disclosures

We may also disclose your information:

• Legal Requirements: When required by law, subpoena, or government request
• Safety: To protect the rights, safety, or property of Circ AI, our users, or the public
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Consent: With your explicit consent for other purposes

4.3 No Sale of Personal Information

We do not sell or share your personal information as those terms are defined under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

5. Automated Processing and AI

How We Use AI: The Service uses AI models (specifically, Anthropic's Claude) to generate circuit designs based on your natural language inputs. This automated processing is solely for the purpose of providing the Service's core functionality.

No Profiling or Automated Decisions About You: We do not use automated decision-making or profiling that produces legal or similarly significant effects concerning you. The AI generates technical circuit outputs based solely on your circuit descriptions—it does not make decisions about you personally (such as creditworthiness, employment eligibility, or access to services).

AI Output Labeling: AI-generated circuit designs may include metadata or comments indicating they were generated by AI. This is in compliance with emerging AI transparency regulations.

6. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law.

• Circuit Data: Retained until you delete them or request account deletion
• Usage Logs: Retained for up to 90 days for security and analytics
• Support Communications: Retained for up to 2 years
• AI Processing: Anthropic does not retain API data for model training

7. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS/HTTPS)
• Secure hosting infrastructure with access controls
• Regular security assessments

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Cookies and Tracking Technologies

We use the following types of cookies:

• Essential Cookies: Required for the Service to function (session management)
• Analytics Cookies: Help us understand how users interact with the Service

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the Service. For users in jurisdictions requiring cookie consent (including the EEA and UK), we will obtain consent before placing non-essential cookies.

9. Your Privacy Rights

9.1 General Rights

Depending on your location, you may have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Receive your data in a structured, commonly used, machine-readable format
• Objection: Object to certain processing of your information

9.2 California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

• Right to know what personal information is collected, used, and disclosed
• Right to delete personal information
• Right to opt-out of the sale or sharing of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights
• Right to limit use of sensitive personal information (we do not collect sensitive PI)

9.3 European Economic Area, UK, and Swiss Residents (GDPR)

If you are in the EEA, UK, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR) and equivalent local laws, including:

• Right to withdraw consent at any time (where processing is based on consent)
• Right to restriction of processing in certain circumstances
• Right to lodge a complaint with a supervisory authority

Supervisory Authorities: You have the right to lodge a complaint with your local data protection authority. For the UK, this is the Information Commissioner's Office (ico.org.uk). For Ireland, this is the Data Protection Commission (dataprotection.ie).

9.4 Exercising Your Rights

To exercise any of these rights, please contact us at contact@circai.ai. We will respond within one month (which may be extended by up to two additional months for complex requests, with notice). You can also delete your circuits directly from the dashboard at any time. We will not discriminate against you for exercising your privacy rights.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws than your jurisdiction.

Transfer Mechanisms: For transfers from the EEA, UK, or Switzerland to the United States or other countries without an adequacy decision, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• The EU-U.S. Data Privacy Framework for applicable transfers to certified organizations
• Supplementary measures including encryption in transit and at rest

You may request a copy of the safeguards we use for international transfers by contacting us.

11. Children's Privacy

The Service is not intended for children under 13 years of age (or 16 in the EEA). We do not knowingly collect personal information from children. By using the Service, you represent that you are at least 13 years old (or 16 in the EEA) or have parental consent.

If you believe we have collected information from a child without proper consent, please contact us immediately at contact@circai.ai, and we will take steps to delete such information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. For material changes, we will provide at least 30 days' advance notice via a prominent notice on the Service and update the "Last updated" date. Your continued use of the Service after the notice period constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: contact@circai.ai

While we have not appointed a Data Protection Officer as we do not engage in large-scale processing of sensitive data or systematic monitoring, all privacy inquiries will be handled promptly at the contact information above.