Privacy Policy

Introduction

MATO, operating as TeamAI ("we," "us," or "our"), is a company registered in Israel. We provide an AI employee management platform that enables users to interact with AI agents operating on real virtual desktops.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services at teamai.com. By using TeamAI, you agree to the practices described in this policy.

Data We Collect

Account Information

When you create an account, we collect your name, email address, and password (stored in hashed form). If you subscribe to a paid plan, we collect billing information processed through our payment provider.

Chat & Task Content

Messages you send to AI employees, task instructions, and the resulting outputs are stored to provide the service and maintain your conversation history.

Usage Data

We collect information about how you use TeamAI, including pages visited, features used, session duration, and interaction patterns. This helps us improve the platform.

Technical Data

We automatically collect your IP address, browser type, operating system, device information, and referring URLs when you access our platform.

Desktop Session Data

When AI employees work on virtual desktops, we may collect screenshots, browser activity logs, files created, and session recordings. See the AI & Desktop Data section below for details.

How We Use Your Data

• Provide the service — process your messages, execute tasks through AI employees, and display results
• Manage your account — authentication, billing, and subscription management
• Improve the platform — analyze usage patterns to fix bugs, enhance features, and optimize performance
• Communicate with you — send service-related notifications, updates, and respond to support requests
• Ensure security — detect and prevent fraud, abuse, and unauthorized access
• Comply with legal obligations — fulfill requirements under applicable laws

We do not sell your personal data. We do not use your chat messages or task content to train AI models.

AI & Desktop Data

TeamAI provides AI employees that operate on real virtual desktops (Docker containers running Ubuntu with a Chrome browser). This section explains how data flows through our AI and desktop systems.

AI Message Processing

When you chat with an AI employee, your messages are sent to third-party AI model providers (currently DeepSeek) for processing. These providers process your messages to generate responses but do not retain your data for their own training purposes under our agreements with them.

Desktop Session Data

Each AI employee works inside an isolated Docker container. During a session, the following data may be generated:

• Screenshots and screen recordings of the virtual desktop
• Files created or downloaded by the AI employee
• Browser history and activity within the container
• Clipboard content used during the session

Container Lifecycle

Virtual desktop containers are ephemeral by default. When a task is completed or a session ends, the container and its local data are destroyed. Session recordings and task outputs are retained according to our data retention schedule described below.

What AI Employees Can See

AI employees can see and interact with the virtual desktop they operate on, including any websites, files, or applications open in the container. They can only access data within their own isolated container — they cannot access other users' containers or your local device.

Data Storage & Security

Your data is stored using Supabase, a cloud database platform. We implement appropriate security measures including:

• Encryption at rest for stored data
• TLS encryption for all data in transit
• Isolated Docker containers for each AI employee session
• Access controls and authentication for all systems
• Regular security reviews

While we take reasonable measures to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

Data Retention

• Account data — retained while your account is active, plus 30 days after deletion
• Chat & task logs — retained for 90 days after creation
• Desktop session recordings — retained for 7 days (if enabled)
• Billing records — retained for 7 years as required by tax law
• Technical logs — retained for 30 days

You may request earlier deletion of your data, subject to our legal obligations. See Your Rights below.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

All Users

• Access — request a copy of your personal data
• Correction — request correction of inaccurate data
• Deletion — request deletion of your personal data
• Export — receive your data in a portable format

European Economic Area Residents (GDPR)

If you are located in the EEA, you have additional rights under the General Data Protection Regulation, including the right to restrict processing, object to processing, and withdraw consent. Our legal basis for processing your data is the performance of our contract with you (providing the service) and our legitimate interests in operating and improving the platform.

California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell your personal information.

Israeli Residents

If you are an Israeli resident, your rights are protected under the Privacy Protection Law, 5741-1981. You have the right to access, correct, and delete your personal data held by us.

To exercise any of these rights, please reach out through our Contact page.

Cookies

We use essential cookies to keep you signed in and maintain your session. We do not use advertising or tracking cookies. For full details, see our Cookie Policy.

Third-Party Services

We use the following third-party services to operate TeamAI:

• Supabase — database and authentication
• DeepSeek — AI model provider for processing chat messages and generating AI employee responses
• Payment processor — for handling subscription payments and billing

Each third-party service has its own privacy policy governing how they handle data. We ensure our agreements with these providers include appropriate data protection measures.

International Data Transfers

TeamAI is based in Israel, and our data infrastructure spans multiple regions. Your data may be transferred to and processed in countries outside your country of residence, including Israel and the United States.

Israel has been recognized by the European Commission as providing an adequate level of data protection. For transfers to other countries, we rely on appropriate safeguards such as standard contractual clauses to ensure your data remains protected.

Children's Privacy

TeamAI is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a person under 18, we will take steps to delete that information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will provide at least 30 days' notice through the platform or via email before the changes take effect. Your continued use of TeamAI after the effective date constitutes acceptance of the updated policy.