Data Security

We know your sales and inventory data matters. This page explains, in plain language, how ACE Operational Intelligence Inc. (“ACE”) handles and protects it. It complements our Privacy Policy.

How your data flows

You bring your data into ACE in one of two ways — by uploading a file (Excel/CSV), or by connecting a database you control. ACE reads that data to generate your reports, insights, and dashboards, and delivers reports to recipients you choose. We use your data to provide the Service to you — nothing more.

Encryption in transit

Connections to our AI provider and email delivery are made over encrypted (HTTPS/TLS) channels. When the website is hosted, it is served over HTTPS.

AI processing

To produce written insights, the necessary data is sent to our AI provider, Anthropic (the “Claude” API). Under Anthropic's API terms, your data is not used to train their models. We send only what is needed to generate your report.

Your database credentials

If you connect a database, the connection details you enter are used only for your active session and are never written to disk or stored by us. You opt in by providing them, and you can disconnect at any time. ACE reads only the data needed to build your report.

Data minimization & retention

We aim to handle the least data necessary. Business data is processed to generate your reports and retained only as long as needed for that purpose or as required by law. You can ask us to delete your information at any time.

Access & confidentiality

Access to customer data is limited to what is needed to operate and support the Service, and is handled under confidentiality obligations. We do not sell or share your data with third parties for their own purposes.

Incident response

If we become aware of a security incident affecting your information, we will act promptly to investigate and contain it, and will notify affected customers and authorities where required by law (including Quebec's Law 25).

Your role

Security is shared. Please keep your own access credentials confidential, grant database access with the minimum permissions needed (read-only is ideal), and only share data you are authorized to use.

Contact

Security questions or to report a concern, email support@aceoperationalintelligence.com.

As an early-stage product, our security practices continue to mature as we grow. This page reflects our current approach and will be updated as it evolves.