PEGGY
AI-Powered Brand Building Platform
Privacy Policy
Effective Date: April 10, 2026 | Last Updated: March 10, 2026
Welcome to Peggy (“Peggy,” “we,” “us,” or “our”). Peggy is an AI-powered brand building chatbot platform designed to help users develop, refine, and execute brand strategies through conversational AI interactions.
This Privacy Policy describes how Peggy Inc. collects, uses, discloses, retains, and protects your personal information when you access or use our services, including our website, chatbot interface, and any related applications or tools (collectively, the “Services”). By using the Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.
Important Note: This Privacy Policy should be read in conjunction with our Terms of Service. If there is any conflict between this Privacy Policy and the Terms of Service, this Privacy Policy shall govern with respect to privacy-related matters.
We collect information in several ways, depending on how you interact with our Services. As our platform evolves, the categories of data we collect may expand. We will update this Privacy Policy accordingly and notify you of any material changes.
2.1 Information You Provide Directly
(a) Account Information
When you register for Peggy, we currently collect your email address. In the future, we may also collect your name, company or brand name, phone number, billing address, and payment information as additional features are released.
(b) User Input Data
When you interact with our AI chatbot, we collect and store the content of your conversations, including but not limited to: brand descriptions, product or service information, target audience details, marketing objectives, stylistic preferences, brand guidelines, logos, images, and any other materials you upload or provide through the chat interface (collectively, “User Input Data”).
(c) Generated Outputs
Peggy's AI engine may generate creative assets, strategic recommendations, brand copy, visual concepts, taglines, marketing plans, and other outputs on your behalf (collectively, “Generated Outputs”). We store these outputs in association with your account so that you may access, modify, and download them.
2.2 Information Collected Automatically
When you access our Services, we may automatically collect certain technical and usage information, including: IP address and approximate geolocation; browser type, operating system, and device identifiers; pages visited, features used, and time spent on the Services; referral URLs and search terms used to reach us; cookies, pixel tags, and similar tracking technologies; and log data, including error reports and performance metrics.
2.3 Information from Third Parties
We may receive information about you from third-party sources such as analytics providers, advertising networks, social media platforms (if you choose to link your accounts), identity verification services, and business partners or integrations you authorize.
We use the information we collect for the following purposes:
Service Delivery
To provide, maintain, and improve the Peggy platform, including generating AI-powered brand recommendations and creative outputs.
Account Management
To create and manage your account, authenticate your identity, and communicate with you about your account.
Personalization
To tailor your experience, remember your preferences, and provide contextually relevant AI responses based on your prior interactions.
AI Model Improvement
To improve the accuracy, quality, and safety of our AI models. Where we use your data for this purpose, we employ de-identification and aggregation techniques. You may opt out of this use (see Section 7).
Communications
To send service-related notices, respond to inquiries, and, with your consent, send marketing communications.
Safety & Security
To detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activity.
Legal Compliance
To comply with applicable laws, legal processes, and regulatory obligations.
Analytics
To understand usage patterns, measure effectiveness, and conduct internal research and development.
Peggy is powered by artificial intelligence. This section addresses how your data interacts with our AI systems specifically.
4.1 How AI Processes Your Data
When you interact with Peggy, your User Input Data is transmitted to our AI processing infrastructure in real time. The AI model uses this data to generate contextual, personalized brand-building recommendations and creative assets. Your conversations may be stored in session memory to maintain context within a single interaction and, where you opt in, across sessions.
4.2 Training and Improvement
We may use de-identified or aggregated User Input Data and Generated Outputs to train, fine-tune, evaluate, and improve our AI models. Before any data is used for training purposes, we apply the following safeguards:
- Personally identifiable information (“PII”) is stripped or pseudonymized.
- Data is aggregated so that individual users cannot be re-identified.
- Sensitive categories of data (financial, health, legal) are excluded from training datasets unless expressly consented to.
- Users may opt out of AI training use entirely via their account settings (see Section 7).
4.3 Third-Party AI Providers
Peggy may utilize third-party AI models or APIs (e.g., large language model providers) to process certain requests. Where we engage third-party AI providers, we require them to:
- Process your data solely for the purpose of providing the Services.
- Not use your data to train their own models without your separate, affirmative consent.
- Maintain commercially reasonable security measures.
- Comply with our data processing agreements.
4.4 Automated Decision-Making
Peggy uses automated processing to generate brand recommendations, creative assets, and strategic suggestions. These outputs are intended as tools to assist your decision-making and are not legally or financially binding. You retain full control over whether and how to implement any AI-generated recommendation.
We do not sell your personal information. We may share your data in the following circumstances:
- Service Providers: We engage trusted third-party vendors who perform services on our behalf, including cloud hosting, analytics, payment processing, email delivery, and customer support. These providers are contractually bound to use your data only as directed by us.
- AI Sub-Processors: As described in Section 4.3, certain data may be shared with third-party AI providers under strict contractual limitations.
- Business Transfers: In connection with a merger, acquisition, reorganization, or sale of all or substantially all of our assets, your data may be transferred to the acquiring entity. We will notify you before your data becomes subject to a different privacy policy.
- Legal Obligations: We may disclose your data where required by law, regulation, legal process, or governmental request, or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
- With Your Consent: We may share your data with third parties when you have given us explicit consent to do so.
We retain your personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods are as follows:
Account Data
Retained for the duration of your account, plus 30 days following account deletion to allow for account recovery.
User Input Data & Generated Outputs
Retained for the duration of your account. Upon account deletion, this data is purged within 90 days, except where retention is required for legal compliance or dispute resolution.
AI Training Data
If you have opted in to AI model improvement, de-identified data may be retained for up to 36 months in our training pipeline. If you subsequently opt out, your data will not be used in future training runs, but data already incorporated into trained models cannot be individually extracted.
Log & Analytics Data
Retained for up to 24 months in identifiable form, after which it is aggregated or deleted.
Legal Hold Data
Data subject to legal preservation obligations may be retained beyond the above periods as required.
Depending on your jurisdiction, you may have the following rights regarding your personal information:
Access
You may request a copy of the personal data we hold about you.
Correction
You may request that we correct inaccurate or incomplete data.
Deletion
You may request deletion of your personal data, subject to legal exceptions.
Portability
You may request your data in a structured, machine-readable format.
Restriction
You may request that we limit certain processing activities.
Objection
You may object to processing based on legitimate interests or direct marketing.
Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time.
Opt Out of AI Training
You may opt out of having your data used to train or improve our AI models at any time via your account settings or by contacting us.
Non-Discrimination
We will not discriminate against you for exercising your privacy rights.
To exercise any of these rights, please contact us at privacy@peggy.ai or use the controls available in your account settings. We will respond to verified requests within 30 days (or such shorter period as required by applicable law).
We use cookies and similar technologies (such as web beacons, pixel tags, and local storage) to: maintain your session and authentication state; remember your preferences; analyze usage patterns and improve our Services; and deliver and measure the effectiveness of marketing communications (with your consent).
You may manage your cookie preferences through your browser settings or through our cookie consent mechanism. Please note that disabling certain cookies may impair the functionality of the Services.
We implement commercially reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include but are not limited to:
- Encryption of data in transit (TLS 1.2+) and at rest (AES-256).
- Role-based access controls with least-privilege principles.
- Regular vulnerability assessments and penetration testing.
- Employee security training and confidentiality obligations.
- Incident response plans with breach notification procedures.
- SOC 2 Type II compliance (or equivalent) for key infrastructure providers.
No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.
Peggy operates globally. Your data may be transferred to and processed in countries other than your country of residence, including the United States. Where such transfers occur, we rely on: Standard Contractual Clauses (SCCs) approved by the European Commission; adequacy decisions where applicable; your explicit consent where required; and other lawful transfer mechanisms under applicable data protection laws.
Peggy is not intended for use by individuals under the age of 16 (or the minimum age required by applicable law in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without appropriate parental consent, we will take steps to delete that information promptly. If you believe a child has provided us with their data, please contact us at privacy@peggy.ai.
If you are a California resident, you are entitled to additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). Specifically, you have the right to: know the categories and specific pieces of personal information we have collected; know the categories of sources from which we collect personal information; know the business or commercial purpose for collecting personal information; know the categories of third parties with whom we share personal information; request deletion of your personal information; opt out of the sale or sharing of personal information (we do not sell your data); and limit the use of sensitive personal information.
To submit a CCPA request, please contact us at privacy@peggy.ai.
If you are located in the European Economic Area, the United Kingdom, or Switzerland, the following additional provisions apply. Our legal bases for processing your personal data include: performance of our contract with you (to provide the Services); your consent (for marketing communications and optional AI training use); our legitimate interests (for security, analytics, and service improvement, balanced against your rights); and compliance with legal obligations.
You have the right to lodge a complaint with your local supervisory authority if you believe our processing violates applicable data protection law.
Our Services may contain links to third-party websites, services, or integrations not operated by us. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party service you access through Peggy.
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make material changes, we will:
- Post the updated policy on our website with a revised “Last Updated” date.
- Notify you via email or in-app notification at least 30 days before the changes take effect.
- Where required by law, obtain your consent before applying the updated policy to your data.
Your continued use of the Services after the effective date of any update constitutes your acceptance of the revised Privacy Policy.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Peggy Inc.
Attn: Privacy Team
Email: privacy@peggy.ai
Website: www.peggy.ai/privacy
For EU/UK data subjects, our Data Protection Officer can be reached at dpo@peggy.ai.
© 2026 Peggy Inc. All rights reserved.
This document is for informational purposes and does not constitute legal advice. Consult qualified counsel for your jurisdiction.