Privacy Policy
Last updated: September 2, 2026
This Privacy Policy describes how Point11 (“Point11,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you visit our website (point11.ai), use our platform, or interact with our services.
1. Information We Collect
Information you provide: name, email address, company, and role when you create an account, fill out a form, or request a demo; billing details when you subscribe (payments are processed by Stripe; we never store full card numbers); and the content of your messages when you contact us.
Information collected automatically: device and usage data such as IP address, browser type, pages visited, and session duration, collected through cookies and similar technologies (see Section 5).
AI conversations: if you talk to the chat or voice assistant on our website, we collect the conversation content and session metadata. To make follow-up conversations useful, we also maintain a lightweight profile of your interactions (for example, topics you asked about). This applies to signed-in users and anonymous visitors alike, and the profile is shared between the chat and voice assistants. To have it deleted, email legal@point11.ai.
Analytics product data: when customers run our analytics products, we collect publicly available web content about the requested websites and brands (including third-party sites used for comparison), sample responses from AI models about those brands, and store the resulting reports as durable customer artifacts. We also produce aggregated, de-identified benchmarks across customers; these cannot reasonably be used to identify any person.
Customer uploads: customers may upload a CRM export to seed synthetic customer generation. The file is parsed in your browser and only the mapped, stripped rows you confirm are sent to us. Those rows are processed by the AI model providers in Section 3 to build generalized customer profiles and are then deleted (rows of a failed upload within seven days); the column samples used to confirm the mapping are never stored.
Information from third parties: business contact information from data-enrichment services, used for sales outreach.
2. How We Use Your Information
- Providing, operating, and improving the Point11 platform and services
- Processing transactions and sending related communications
- Responding to inquiries, support requests, and feedback
- Analyzing usage patterns to improve the product
- Sending marketing communications (you can opt out at any time)
- Detecting and preventing fraud, abuse, and security issues
- Complying with legal obligations and enforcing our terms
We do not sell personal information, and we do not use customer data to train AI models.
3. Service Providers
We share information with service providers only as needed to operate the platform. Each may use it solely to provide services to us:
- Hosting and infrastructure: Vercel (application hosting, content delivery, anonymized page-view and performance telemetry, and isolated sandboxes that render generated artifacts), Neon (database), Upstash (cache), Browserbase (remote browsers that visit customer-specified websites for Experience runs).
- AI model providers: accessed via Vercel AI Gateway, including Anthropic, OpenAI, Google, and xAI (language model inference), Perplexity (web search inside model tool loops), and ElevenLabs (voice).
- Business data and locations: Google Places (business location lookup), Mapbox (map tiles and geocoding of business and customer location text), HubSpot (sales CRM records for business contacts), and Slack (only when a customer installs the Slack agent into their own workspace).
- Identity and payments: WorkOS (sign-in and single sign-on), Stripe (payment processing).
- Communications: Resend (email delivery).
- Analytics and advertising: Google (ads conversion measurement) and anonymized product telemetry (Vercel Analytics).
- Product analytics: PostHog (US-hosted), within the signed-in application only. We send it your user ID, email address and name, the ID and slug of the organization you are working in, page views with query strings removed, the actions you explicitly trigger in the product, and the type of any application error. We do not record sessions, do not capture the text of what you click on, strip error messages and stack traces before they leave your browser, and create no PostHog profile for signed-out visitors.
We may also disclose information when required by law or valid legal process, or in connection with a merger, acquisition, or sale of assets (in which case we will notify you).
4. Data Retention
We retain personal information for as long as needed to provide our services, maintain our business relationship with you, comply with legal obligations, and resolve disputes. When it is no longer needed, we delete or anonymize it. You can request deletion of your data at any time by emailing legal@point11.ai.
When you close your user account, the chat conversations and messages tied to it are deleted within 30 days. When an organization account is closed, the product data it holds, including uploaded contact data and conversation records, is deleted within 30 days of closure. Billing records and security logs are retained as required by law.
6. Your Rights and Choices
You may request to:
- Access a copy of the personal information we hold about you
- Correct inaccurate personal information
- Delete your personal information
- Receive your data in a structured, machine-readable format
- Opt out of marketing emails (use the unsubscribe link or contact us)
If you are a California resident or a resident of another U.S. state with comprehensive privacy legislation, these rights, including the right to know, the right to opt out of the sale or sharing of personal information (we do not sell or share it), and the right to non-discrimination for exercising your rights, apply as provided by your state's law.
To exercise any of these rights, contact us at legal@point11.ai. We will verify your identity and respond within the time required by applicable law.
7. Security
We implement commercially reasonable administrative, technical, and physical safeguards to protect personal information, including encryption in transit and at rest. For details on our security practices, see point11.ai/security. No method of transmission over the Internet is completely secure.
8. International Data Transfers
Point11 is based in the United States. If you access our services from outside the United States, your information will be transferred to and processed in the United States.
9. Children's Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new “Last Updated” date and, where required, by providing additional notice (such as email).
11. Contact Us
Point11
Email: legal@point11.ai