Privacy Policy
Effective date: March 1, 2026
3ywa ("we", "us", or "our") operates the 3ywa platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
1. Information We Collect
1.1 Account Information
When you create an account we collect your name, email address, and organisation details. If you sign in through a third-party provider (e.g. Google), we receive the profile information that provider shares with us.
1.2 Connected Data Sources
When you connect third-party services (Slack, Confluence, Google Drive, etc.) we access and process content from those services on your behalf. We only access data that your granted permissions allow, and we use it solely to build and query your organisation's knowledge graph.
1.3 Usage Data
We automatically collect information about how you interact with the Service, including pages viewed, features used, search queries, browser type, IP address, and device identifiers.
1.4 Cookies & Similar Technologies
We use cookies and local storage to maintain your session, remember your preferences (such as language and theme), and improve the Service.
2. How We Use Your Information
- Provide, operate, and maintain the Service
- Build and update your organisation's knowledge graph
- Process search queries and generate AI-assisted responses
- Authenticate users and enforce access controls
- Send transactional emails (e.g. password resets, alerts)
- Monitor and improve performance, security, and reliability
- Comply with legal obligations
3. AI Processing
Content you ingest is processed by AI models (including third-party models from Anthropic and OpenAI) to extract entities, relationships, and embeddings. This processing is performed solely to deliver the Service to you. We do not use your content to train AI models.
4. Data Sharing & Disclosure
We do not sell your personal information. We may share data with:
- Service providers — cloud infrastructure (AWS), AI model providers, and analytics tools that help us operate the Service, under contractual obligations to protect your data.
- Legal requirements — when required by law, regulation, or valid legal process.
- Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to you.
5. Data Storage & Security
Your data is stored on AWS infrastructure in the United States (US-East-1). We implement industry-standard security measures including encryption in transit (TLS) and at rest, access controls, and regular security reviews.
6. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. When you delete your account or disconnect a data source, we remove the associated data from our systems within 30 days, except where retention is required by law.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Object to or restrict certain processing
- Withdraw consent where processing is based on consent
To exercise these rights, contact us at privacy@3ywa.com.
8. International Transfers
If you are located outside the United States, your information will be transferred to and processed in the United States. We take appropriate safeguards to ensure your data is protected in accordance with this policy.
9. Children's Privacy
The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the effective date.
11. Contact Us
If you have questions about this Privacy Policy, please contact us at privacy@3ywa.com.