2. Information We Collect

2.1 Information You Provide Directly. Identifiers and contact information (e.g., first and last name, email address, company/employer information), account credentials, and communications you send to us (including support inquiries).

2.2 Database Metadata. DataExtraction and Intelligent Processing Upon connection to a client database,Teela automatically extracts and processes schema-level metadata (such as DDL structures, table names, and field descriptions). To enable high-accuracy, natural-language querying, we also store specific, limited data elements (e.g.,product names or category identifiers) from your database, but you are able to opt out of this if desired.

2.3 Vector Storage & Security.This information is converted into numerical embeddings and stored in a secure, isolated vector database. This process allows our AI to understand the context of your data without manual mapping.

1. No External Access: This data is never shared with third parties, is not accessible to the public, and cannot be accessed by other Teela clients.
2. Access Control: Data stored in our vector database is accessible only through the Teela software interface by authorized users within your organization.
3. Internal R&D: We may use de-identified or aggregated versions of this metadata internally to improve our machine learning models and system performance, as permitted by law.

3. Technical Safeguards and Data Handling

3.1 Read-Only System Architecture. Teela’s integration with client databases is engineered to operate under a strictly read-only permission model. The Services do not, and from a technical standpoint cannot, modify, update, alter, or delete client data or database structures. 

3.2 Client Controls Over Data Visibility. Clients may limit the AI’s visibility into specific tables, fields, or data categories by removing or restricting the corresponding DDL information within our vector database (e.g., to exclude sensitive or regulated information). 

3.3 Use of Third-Party AI Services. Teela utilizes Microsoft Azure OpenAI for natural-language processing. Data transmitted to Azure is processed solely to deliver the Services and is not used by Microsoft to train models for unrelated purposes. Sub-processors and infrastructure providers are bound by contractual and security obligations.

1. No External Access: This data is never shared with third parties, is not accessible to the public, and cannot be accessed by other Teela clients.
2. Access Control: Data stored in our vector database is accessible only through the Teela software interface by authorized users within your organization.
3. Internal R&D: We may use de-identified or aggregated versions of this metadata internally to improve our machine learning models and system performance, as permitted by law.

4. Cookies and Similar Technologies

We use cookies and similar technologies on the Sites to operate essential features, remember preferences, analyze traffic, and understand usage. You can manage cookies through your browser settings. Where required by law, we will present a cookie banner and obtain consent for non-essential cookies on your first visit to the site.

4.1 Cookies and Similar Technologies We use first-party and third-party cookies for the following purposes:

1. Essential Cookies: Necessary for the Sites to function, such as maintaining your session and security.
2. Functional Cookies: Used to remember your preferences, such as language or region.
3. Analytics Cookies: We use providers like Google Analytics to understand how visitors interact with our Sites, which helps us improve performance and user experience.

5. How We Use Personal Information

1. Provide, operate, maintain, and secure the Services and Sites (including account set-up and authentication).
2. Process queries and return results; improve natural-language understanding and accuracy.
3. Troubleshoot, analyze performance, and conduct diagnostics and quality assurance.
4. Communicate with you, including transactional messages and customer support.
5. Send marketing communications (with your consent where required) and personalize content.
6. To make our services smarter, we use 'de-identified' data (information that has been stripped of your name and identity) to help train our AI models. This work is done entirely within our own secure systems. We do not sell your data or give it to outside companies to train their AI.
7. Detect, prevent, and respond to security incidents and fraud.
8. Comply with legal obligations and exercise or defend legal claims.

6. How We Share Personal Information

1. Service Providers and Sub-processors: Vendors who provide hosting, cloud/AI processing (e.g. Azure OpenAI), analytics, customer support, security, and other services.
2. Business Transfers: In connection with a merger, acquisition, financing, reorganization, or sale of assets.
3. Legal Compliance and Safety: To comply with law, legal process, or to protect rights, property, or safety.
4. With Your Direction or Consent: When you instruct us or consent to a disclosure.

7. Security

We maintain administrative, technical, and organizational safeguards designed to protect Personal Information against unauthorized access, alteration, disclosure, or destruction. These measures may include encryption in transit, access controls, logging and monitoring, and workforce training. No method of transmission or storage is completely secure; you use the Sites and Services at your own risk.

1. Service Providers and Sub-processors: Vendors who provide hosting, cloud/AI processing (e.g. Azure OpenAI), analytics, customer support, security, and other services.
2. Business Transfers: In connection with a merger, acquisition, financing, reorganization, or sale of assets.
3. Legal Compliance and Safety: To comply with law, legal process, or to protect rights, property, or safety.
4. With Your Direction or Consent: When you instruct us or consent to a disclosure.

8. Retention

We maintain administrative, technical, and organizational safeguards designed to protect Personal Information against unauthorized access, alteration, disclosure, or destruction. These measures may include encryption in transit, access controls, logging and monitoring, and workforce training. No method of transmission or storage is completely secure; you use the Sites and Services at your own risk.

• Account Information: Retained for the duration of an active account and thereafter as required or permitted by law (e.g., for fraud prevention, dispute resolution, or legal compliance).
• Metadata: Stored in our vector database until the client terminates the connection or requests deletion.
• Query Data: Teela maintains a strict no-retention policy for query-level data accessed during execution; such data is discarded immediately after the query response is generated.
• Applicant Data: Retained for a reasonable period to evaluate your candidacy and as required by law.

9. International Data Transfers

If you access the Sites or Services from outside the country where our systems are hosted, your information may be transferred to and processed in that country (which may have different data protection laws than your jurisdiction). Where required, we implement appropriate safeguards for such transfers.

10. Your Privacy Rights

Depending on your location, you may have rights such as to access, correct, delete, and obtain a copy of your Personal Information, to opt out of certain processing, and to withdraw consent. You will not receive discriminatory treatment for exercising your rights. To submit a request, contact us at privacy@teela.ai (or use any method listed in Section 16). We will verify your identity and respond within the timeframe required by applicable law (generally 45 days). Where available, you may designate an authorized agent to act on your behalf, subject to verification requirements.

‍Appeals. Residents of certain U.S. states (e.g., Colorado, Connecticut, and Virginia) may appeal our decision regarding a privacy request by following the instructions we provide in our response. We will respond to appeals within the time required by law. 

‍
Opt-Out Signals and Do Not Track. We honor legally recognized browser-based opt-out signals (such as the Global Privacy Control) where required. We do not currently respond to Do Not Track browser signals.

11. Children’s Privacy

The Sites and Services are not directed to or intended for children under 18. We do not knowingly collect Personal Information from anyone under 18. If we learn that we have collected such information without verifiable parental consent, we will delete it.

12. Additional Disclosures for California Residents

12.1 We do not sell or share Personal Information (as defined by the California Consumer Privacy Act, as amended). We use and disclose the categories of Personal Information described in Sections 2, 5, and 6 for the business purposes identified in this Policy. We retain PersonalInformation as described in Section 8. We do not use or disclose sensitivePersonal Information for purposes that require a right to limit such use or disclosure. California residents may exercise their rights as described in Section 10. 

‍12.2 Categories of Personal Information Disclosed. In the preceding 12 months, Teela has not disclosed the following categories of Personal Information for the business purposes defined in Section 5 as this is a new business. However, Teela will disclose the following categories of PersonalInformation for business purposes according to Section 5 moving forward: 

13. Legal Bases for Processing (EEA/UK)

Where the GDPR or UK GDPR applies, we process Personal Information under one or more of the following legal bases: (i) to perform a contract with you; (ii) with your consent; (iii) for our legitimate interests in providing, securing, and improving the Services, provided those interests are not overridden by your fundamental rights and freedoms; and/or (iv) to comply with legal obligations.

14. Automated Decision-Making

Teela does not engage in automated decision-making that produces legal or similarly significant effects about individuals. The Services translate natural-language prompts into SQL to retrieve information from client databases but do not make binding determinations about an individual’s rights or entitlements.

15. Changes to This Policy

We may revise this Policy from time to time. Material updates will be accompanied by a revised “Last Updated” date and, where legally required, additional notice. Your continued use of the Sites or Services after the effective date of an update constitutes acceptance of the revised Policy.

16. Contact Us

If you have questions about this Policy or wish to exercise your rights, please contact us at:

• Email: privacy@teela.ai
• Mailing Address: 1772 Heritage Center Dr. Suite 201, Wake Forest, NC 27587
• Phone: 910-68-TEELA (910-688-3352)