Privacy Policy

Last updated: May 6, 2025

This Privacy Policy describes how Papaya Assist ("Service"), operated by Weng AI ("we", "us", "our"), collects, uses, and protects information.

1. Information We Collect

Account information: When you sign up, we collect your email address and store a hashed password. If you sign in via Google, we receive your email from Google OAuth.

Documents: Files you upload (PDF, DOCX, TXT) are stored in Amazon S3 and processed into vector embeddings for retrieval.

Chat messages: Messages sent by your website visitors through the chat widget are processed in real-time to generate responses. Chat messages are not permanently stored on our servers.

Usage data: We track message counts and document counts per tenant for plan enforcement.

2. How We Use Your Information

• To provide and maintain the Service
• To authenticate your account
• To process your documents into searchable knowledge
• To generate AI responses to visitor questions
• To enforce usage limits based on your plan

3. Data Storage and Security

All data is stored on Amazon Web Services (AWS) in the us-east-1 region. Documents are stored in Amazon S3. Account data is stored in Amazon DynamoDB. Vector embeddings are stored in Pinecone. All data is transmitted over HTTPS.

4. Third-Party Services

• Amazon Web Services (AWS): Infrastructure, storage (S3), database (DynamoDB), and compute (Lambda). AWS Privacy Policy.
• OpenAI: Used for generating chat responses and document embeddings. Document text and visitor messages are sent to OpenAI's API for processing. OpenAI Privacy Policy.
• Pinecone: Vector database for storing and querying document embeddings. Pinecone Privacy Policy.
• Google Firebase: Used for authentication (Google sign-in) on the admin dashboard. Firebase Privacy Policy.

5. Data Sharing

We do not sell your data. We share data only with the third-party services listed above, solely to provide the Service.

6. Data Retention

Your documents and account data are retained as long as your account is active. If you delete documents, they are removed from S3 and the vector store. If you delete your account, all associated data is removed.

7. Your Rights

You can:

• Access and download your uploaded documents at any time
• Delete individual documents or all documents
• Request account deletion by contacting us

8. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the Service after changes constitutes acceptance.

10. Contact

Questions about this Privacy Policy? Contact us at j.y.weng@gmail.com.