iAM · Legal

Privacy Policy

Last updated: 30 June 2026

iAM is built around your intent — not your attention and not your data. This policy explains what we collect, why, and the choices you have. Our central promise: we never sell your personal data, and we never run third-party advertising against it.

1. Scope

This Privacy Policy explains how iAM collects, uses, shares, and protects personal data when you use the iAM website, applications, and services (the “Service”). It should be read together with our Terms of Service.

2. Who we are

iAM is operated by IntentNet Inc, a Delaware corporation (“iAM”, “we”, “us”), the controller of your personal data. For any privacy question or to exercise your rights, contact us at hello@useiam.ai.

3. Information we collect

Information you give us

  • Account data — your name, display name, @handle, email address, and (for password sign-in) a securely hashed password. We never store your password in plain text.
  • Profile and preference data — your bio, region, style and taste signals, and any document you upload to seed your profile. This may include preferences you choose to share such as interests, sizes, dietary choices, and budget signals.
  • Content you create — your prompts and intents, messages, posts, and the items you save, lock, or book.
  • Communications — messages you send us, for example through the contact form or by email.

Information we collect automatically

  • Usage and interaction data — the actions you take in the Service (searches, views, selections, bookings), which power your personalisation.
  • Device and technical data — such as IP address, browser/user-agent, and similar technical information used for security, debugging, and abuse prevention.
  • Cookies and similar technologies— used to keep you signed in and to make the Service work (see “Cookies” below).

Payment information

Payments are processed by our payment provider (Stripe). Your full card number is handled directly by the provider — we do not store complete card details on our systems. We may retain limited information such as the card brand, last four digits, and a secure token to support your transactions.

4. The Intent Graph

As you use iAM, we build an Intent Graph — a per-user model of your taste, history, and preferences that makes your results more relevant over time. The Intent Graph exists for one purpose: to serve you. It is yours. We do not sell it, we do not rent it, and we do not use it to power a third-party advertising or data business.

5. How we use your information

  • to provide, maintain, secure, and improve the Service;
  • to understand your intent and to personalise and rank results through your Intent Graph;
  • to facilitate bookings, purchases, collaboration, and payments you request;
  • to communicate with you about the Service, including transactional emails and replies;
  • to prevent fraud and abuse and to keep the Service and our users safe;
  • to comply with legal obligations and enforce our Terms.

6. Legal bases for processing

Where applicable data-protection law (such as the UK GDPR / EU GDPR) applies, we process your personal data on these bases: to perform our contract with you (to provide the Service you request); our legitimate interests (to secure, improve, and personalise the Service in ways you would reasonably expect); your consent (where we ask for it, which you may withdraw at any time); and to comply with a legal obligation.

7. AI processing

To understand your intent and generate personalised responses and actions, we share the information necessary for a given request with the AI providers that power the Service (for example, Anthropic and Groq). These providers process the data to return a result to us. We do not sell your personal data to them, and we do not permit them to use your personal data for their own independent purposes. AI outputs can be imperfect — see our Terms of Service regarding reliance on automated outputs.

8. How we share information

We do not sell your personal data. We share it only as needed to run the Service:

  • Service providers we direct (sub-processors) — for example, travel and booking providers and aggregators (such as Duffel), experience and activity providers (such as Viator), restaurant reservation providers (such as OpenTable), maps and places (such as Google Maps), weather data (such as OpenWeatherMap), payments (Stripe), AI providers (such as Anthropic and Groq), database hosting (such as MongoDB Atlas), caching (such as Upstash), email delivery, and application hosting. They may process your data only to provide services to us.
  • People you choose to share with — when you @mention or invite others into a shared Stage, the relevant information is shared with those participants.
  • To complete what you ask for — when you book or purchase, we share the details needed to fulfil that action with the relevant provider.
  • Legal and safety — where required by law, to protect rights and safety, or to prevent fraud and abuse.
  • Business transfers — if iAM is involved in a merger, acquisition, or sale of assets, your data may transfer as part of that transaction, subject to this policy.

9. Cookies and similar technologies

We use strictly necessary cookies and similar technologies to keep you signed in and to operate the Service. We do not use third-party advertising cookies. You can control cookies through your browser settings, though disabling necessary cookies may stop parts of the Service from working.

10. Data retention

We keep personal data for as long as your account is active and as needed to provide the Service, then for as long as necessary to meet legal, accounting, security, or dispute- resolution requirements. When data is no longer needed, we delete or anonymise it. You can ask us to delete your account and associated personal data at any time (see “Your rights”).

11. Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of your personal data; to object to or restrict certain processing; and to withdraw consent. To exercise any of these, email hello@useiam.ai. We will respond as required by applicable law. You also have the right to complain to your local data-protection authority (in the UK, the Information Commissioner’s Office; in the EU, your national supervisory authority).

12. Security

We use technical and organisational measures designed to protect your personal data, including encryption in transit, hashed passwords, access controls, and tokenised payment handling. No system is perfectly secure, so we cannot guarantee absolute security, but we work to protect your information and to respond appropriately to any incident.

13. International data transfers

We and our service providers may process your data in countries other than your own. Where we transfer personal data internationally, we use appropriate safeguards (such as standard contractual clauses) where required by law.

14. Children

The Service is not directed to, and is not intended for, anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will take appropriate steps to delete it.

15. Third-party links

The Service may link to third-party sites and services that we do not control. Their privacy practices are governed by their own policies, and we are not responsible for them.

16. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you (for example, by updating the date above or by notice in the Service). Your continued use of the Service after an update means you accept the revised policy.

17. Contact

For any privacy question or request, email hello@useiam.ai or use our contact page.