Skip to content
microfiber

Last updated: June 29, 2026

Privacy Policy

Effective date: June 29, 2026

1. Who We Are

Microfiber Technologies LLC ("Microfiber," "we") provides a private, compliance-first AI document platform. This Privacy Policy explains what personal information we collect about account holders and website visitors, how we use it, and your choices.

2. The Most Important Thing: Your Documents Are Not Covered Here

Microfiber separates two kinds of data by design:

  • Your document content (the files you ingest, your prompts, the answers, and anything derived from them) is Customer Data. It is processed and stored only inside our controlled data plane and is governed by our Data Processing Agreement (DPA) — not this Privacy Policy. We do not use it for any purpose other than providing the Service, we do not train models on it, and we do not sell it.
  • This Privacy Policy covers the account and usage metadata in our control plane (who your account is, how you use the Service), described below.

Optional features that touch your content — Web Research (which sends only a freshly-composed, identifier-stripped search query to a public search provider, never your documents, corpus, conversation, or this policy's control-plane data) and Connected Sources (read-only access to your own systems) — are governed by the DPA (§8.4–8.5), not this Policy.

3. Information We Collect (Control Plane Only)

You provide:

  • Account data — name, email, organization, and authentication details (via our identity provider).
  • Billing data — plan and payment information. Payments and usage-based billing are processed by Stripe; we do not store full card numbers. Stripe receives only billing and account data — it has no access to the data plane or your document content.
  • Support communications — messages you send us.

Collected automatically:

  • Usage / audit metadata — that a request occurred and its metadata: tenant, model/profile, token and request counts, timestamps, latency, and feature flags. This metadata never includes the content of your prompts, responses, or documents.
  • Device / site data — IP address, browser/app type, and basic server-side request logs. We use necessary cookies only (no advertising or cross-site tracking cookies). Our website uses Vercel Web Analytics, which is cookieless and collects only aggregate, privacy-friendly traffic metrics — no cross-site tracking and no individual profiles.

We do NOT collect into the control plane: your document content, prompts, responses, retrieved excerpts, chunks, embeddings, or the names/identifiers of your documents (the corpus catalog is treated as content and stays in the data plane).

4. How We Use This Information

We use control-plane information to: create and manage your account; authenticate and secure access; provide, maintain, and support the Service; meter usage and bill; maintain a metadata-only audit trail for security and compliance; communicate with you about the Service; and comply with law.

We do not sell your personal information, and we do not use it for third-party advertising or to train models.

5. Legal Bases / Notices

We process control-plane information to perform our contract with you, for our legitimate interests in operating and securing the Service, and to comply with legal obligations. Where consent is required, we obtain it.

6. How We Share Information

We share control-plane information only with:

  • Service providers / sub-processors that help us run the Service, under contract. Our current sub-processors are disclosed to customers in the DPA; payments are processed by Stripe (billing/account data only — no access to the data plane); website traffic is measured with Vercel Web Analytics (cookieless, aggregate metrics). (Inference sub-processors that handle per-query document excerpts are disclosed in the DPA, since that involves Customer Data, not this policy's control-plane data.)
  • Legal / safety — when required by law or to protect rights, safety, and security.
  • Business transfers — in a merger, acquisition, or sale, subject to this policy.

We do not share your document content with anyone except as set out in the DPA.

7. Data Retention

We retain account data for the life of your account and as needed for legal, accounting, and security purposes, then delete or anonymize it. Usage/audit metadata is retained for up to 24 months (then deleted or anonymized) to support security and compliance. Your document content retention is governed by the DPA (deleted on offboarding with a Certificate of Destruction).

8. Security

We protect control-plane information with access controls, MFA on the portal, encryption in transit, and least-privilege credentials. Our data plane (where document content lives) is further isolated per tenant and described in the DPA's security annex. No system is perfectly secure, but custody is built into our architecture, not bolted on.

9. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise them, contact us at collin@microfiber.ai. We will respond as required by applicable law.

  • California residents (CCPA/CPRA): we do not sell or "share" personal information for cross-context behavioral advertising.
  • For document content, deletion is handled under the DPA via your account / on offboarding.

10. Cookies

We use necessary cookies only to operate the site/app, and do not use advertising or cross-site tracking cookies — so no cookie-consent banner is required. Any website analytics we use is cookieless.

11. Children

The Service is for businesses and is not directed to children under 13, and we do not knowingly collect their personal information.

12. International Users

We process control-plane information in the United States. If you access the Service from elsewhere, you understand it is processed in the U.S.

13. Changes

We may update this policy; we will post the new effective date and, for material changes, provide reasonable notice. Continued use after the effective date constitutes acceptance.

14. Contact

Microfiber Technologies LLC · 80 S. Geronimo St., STE 1, Miramar Beach, FL 32550 · collin@microfiber.ai