This Privacy Policy explains how 369AI, Inc. ("369AI", "we", "us") collects, uses and protects personal information when you visit 369ai.cloud, contact us, or use the 369AI platform, including the 369AI SuiteApp for NetSuite, 369Chat, the 369AI mobile app and related services (together, the "Services").
369AI is an AI SuiteApp built for NetSuite. It runs inside your NetSuite account and acts on your data there. That design shapes most of this policy: your NetSuite records stay in NetSuite, and we do not keep copies of them on our servers unless you turn on a feature that needs it (see 3.3).
1. Who we are and our role
369AI, Inc., 382 NE 191st St, Miami, Florida 33179-3899, USA.
- Controller. For website visitors, prospects, partners and account administrators, we decide how your information is used.
- Processor / service provider. For data inside a customer's NetSuite account and anything users type, upload or say to the Services ("Customer Data"), we act on behalf of our customer. The customer's own privacy notice governs that data, and our Subscription Agreement and any Data Processing Agreement (DPA) control how we handle it. If you are an end user at one of our customers, please contact your employer with privacy requests about Customer Data.
2. Information we collect
Information you give us
- Contact and business details from forms (Request a Demo, Free AI Assessment, Partner Up), emails and calls: name, work email, phone, company, job title, and what you tell us about your needs.
- Account details for administrators and users: name, work email, NetSuite account ID, NetSuite role, and settings.
- Billing details for customers: billing contact, company address and invoicing information. Card or bank details are handled by our payment processors, not stored by us.
- Meeting recordings or transcripts, when you agree to them on a call.
Information collected automatically
- Website data: IP address, browser and device type, pages viewed, referring site, and approximate location. We use a B2B visitor identification tool that may match an IP address to a company name. See the Cookie Policy tab.
- Platform usage metadata: logins, feature and model usage, Expert and Agent activity, deployment status, error logs and performance data. We use this to run, secure, support and bill the Services. It does not include the content of your chats.
Customer Data processed by the Services
- NetSuite records the user has access to through their NetSuite role.
- Prompts, chat messages, files (PDF, Excel, CSV, email files, images) and voice input from the mobile app.
- Data from systems a customer connects, such as Shopify, Amazon, Outlook or Gmail.
3. How the Services handle Customer Data
3.1 Real-time processing
NetSuite record data is read and processed in real time to complete the request, then discarded by our backend. We do not keep chat content on our servers. Chat history the user sees is stored inside the customer's own NetSuite account.
3.2 AI model providers
To answer a request, relevant Customer Data is sent to the AI model the customer has selected. By default this is Google Gemini. Customers can also select models from Anthropic or OpenAI.
- When we supply the API key, we use paid enterprise API tiers whose terms prohibit using your data to train their models. Providers may keep inputs and outputs for a limited period (for Google, up to 30 days) only for abuse monitoring, then delete them.
- When a customer uses their own API key ("Bring Your Own Key"), data goes to that provider under the customer's own agreement with them, and does not pass through 369AI infrastructure for model calls.
3.3 Features that store data
Some optional features keep data outside NetSuite, only when the customer enables them:
- CFO Insights / data warehouse: selected NetSuite data, and data from connected sources, is copied to a dedicated Google BigQuery environment to build forecasts and reports.
- Integrations and connectors: data needed to sync records between NetSuite and connected systems.
This data is used only to provide that feature and is deleted when the feature is turned off or the subscription ends, as described in section 7.
3.4 Human access
Our team does not review your prompts or chats. A 369AI support engineer looks at Customer Data only when the customer asks us to troubleshoot, and that review happens within the customer's NetSuite account under its access controls.
3.5 No training
We do not use Customer Data to train AI models, ours or anyone else's.
3.6 Audit trail
Changes the Services make in NetSuite are recorded in NetSuite System Notes, so customers keep a full record of what the AI did and on whose behalf.
4. How we use information
- Provide, run, maintain and support the Services.
- Authenticate users and keep accounts secure.
- Respond to inquiries, run demos and assessments, and manage partner relationships.
- Bill customers and pay partner commissions.
- Improve the Services using usage metadata and feedback, never the content of Customer Data.
- Send product updates and marketing emails to business contacts. You can unsubscribe at any time.
- Comply with law, enforce our terms and protect our rights.
Where GDPR or UK GDPR applies, our legal bases are: performing a contract, our legitimate interests (running and growing a B2B software business, security), your consent (for non-essential cookies and some marketing), and legal obligations.
5. How we share information
We do not sell personal information. We share it only with:
- Service providers (subprocessors) that help us run the Services, under contracts that limit their use of the data. See the table below.
- Referral and implementation partners (for example, NetSuite consulting firms) when you were referred by them or asked us to work with them.
- Professional advisers such as lawyers, accountants and auditors.
- Authorities, when required by law or to protect rights and safety.
- A buyer or successor, if 369AI is involved in a merger, acquisition or sale of assets, subject to this policy.