AI Data Processing & Training Policy
This AI Data Processing & Training Policy explains how Asiyst processes information when you use our AI-powered Services, including how data may be sent to or processed by third-party AI model providers.
1. Scope
This policy applies to data processed through Asiyst's AI features, APIs, SDKs, CLI tools, integrations, and other Services that use artificial intelligence or machine-learning technologies.
This policy should be read together with the Asiyst Privacy Policy and Terms of Service.
2. How AI Processing Works
When you use an Asiyst feature that requires AI processing, information may be processed by Asiyst and, where applicable, third-party AI model providers.
Depending on the feature and configuration, processed information may include:
- User prompts and messages.
- Information provided to an AI assistant or avatar.
- Uploaded files or documents.
- Website or application content provided as a knowledge source.
- Configuration and instructions provided by the developer.
- AI-generated responses.
- Technical information required to operate the AI service.
- Usage and token information required for billing, security, monitoring, and service operation.
The specific data processed depends on how you configure and use Asiyst.
3. AI Model Providers
Asiyst may use third-party AI infrastructure and model providers to provide AI functionality.
Depending on the configuration, these providers may include services such as OpenAI, Anthropic, Google, or other supported providers.
When third-party AI providers are used, relevant data may be transmitted to those providers for the purpose of processing requests and generating responses.
Third-party providers may have their own privacy policies, security practices, retention periods, and contractual terms.
4. Customer-Controlled AI Providers
Where Asiyst allows customers to connect their own AI provider accounts or API keys, the customer may be responsible for selecting and configuring the applicable provider.
In these circumstances:
- The customer's requests may be sent directly to the selected provider.
- The provider's terms and privacy policies may apply.
- Asiyst may process technical information required to facilitate the integration.
- Customers are responsible for ensuring that their use of the provider complies with applicable laws and the provider's terms.
Customers should review the applicable provider's data-processing and training policies before enabling an integration.
5. AI Training
Asiyst does **not use customer content, prompts, conversations, uploaded data, knowledge sources, or other customer-provided content to train Asiyst's general-purpose AI models unless Asiyst expressly states otherwise or obtains the applicable permission required for such use.
Data may nevertheless be processed for purposes necessary to provide and operate the Services, including:
- Generating AI responses.
- Maintaining and securing the Services.
- Detecting abuse and security threats.
- Troubleshooting and debugging.
- Measuring service performance.
- Preventing fraud and misuse.
- Complying with legal obligations.
- Providing customer-requested functionality.
Operational processing does not by itself mean that customer data is used to train a general-purpose AI model.
6. Third-Party Provider Training
Third-party AI providers may have separate policies governing whether API inputs and outputs are used for model training or other purposes.
Where Asiyst uses a third-party provider, the applicable provider's contractual terms and data-processing practices may apply to the relevant processing.
Asiyst will not represent that a third-party provider does not retain or use data for training unless the applicable provider's current terms or contractual arrangement support that representation.
7. Data Retention
AI-related data may be retained for different periods depending on its purpose.
For example, certain information may be retained to:
- Provide conversation history or other requested features.
- Maintain account functionality.
- Process usage and billing records.
- Detect and investigate abuse.
- Maintain security logs.
- Resolve technical issues.
- Meet legal or regulatory requirements.
Retention may also depend on the configuration of the applicable third-party AI provider.
8. Sensitive and Confidential Information
You should not submit highly sensitive personal information, confidential information, credentials, authentication secrets, financial information, or other information that you are not authorized to process through an AI service.
Before submitting information to an AI feature, you are responsible for determining whether the information is appropriate for the particular processing environment.
If you operate an application using Asiyst, you are also responsible for providing appropriate notices to your users and obtaining any required permissions or legal bases for processing their information.
9. Customer Responsibilities
Customers using Asiyst to provide AI-powered functionality to their own users are responsible for:
- Determining what information is submitted to AI services.
- Providing appropriate privacy notices.
- Obtaining required consent or other legal authorization where applicable.
- Configuring third-party AI providers appropriately.
- Avoiding unauthorized processing of personal or confidential information.
- Complying with applicable data-protection and privacy laws.
- Implementing appropriate security controls.
10. AI-Generated Content
AI-generated content may be inaccurate, incomplete, outdated, or inappropriate for a particular purpose.
You are responsible for reviewing AI-generated content before relying on it for decisions or actions that require accuracy, legality, safety, or professional judgment.
Asiyst does not guarantee that AI-generated content will always be accurate or suitable for a particular purpose.
11. Security
Asiyst uses reasonable technical and organizational measures designed to protect information processed through the Services.
However, no method of transmission, storage, or processing can be guaranteed to be completely secure.
Customers are also responsible for protecting their accounts, API keys, provider credentials, and other authentication information.
12. Changes to This Policy
Asiyst may update this AI Data Processing & Training Policy as its Services, AI providers, technologies, or legal requirements change.
The current version published by Asiyst will govern the applicable processing practices.
13. Contact
For questions regarding AI data processing or training practices, contact:
Asiyst Website: https://asiyst.com Email: support@asiyst.com