Pansophy AI Inc. is committed to protecting the privacy of data processed by Second Opinion for Sales. This Policy explains what we collect, how we use it, who we share it with, and the controls you have over it. Most processing happens within Microsoft Azure in the United States. Two parts of the service, both on the direct subscription plan, involve providers outside that boundary: payment processing by Stripe, and the AI agent you connect, such as Anthropic's Claude. We identify both plainly below.
Second Opinion for Sales is available two ways. What we collect, who processes it, and how it reaches us depend on which you use. The behavioral analysis pipeline is identical on both. The differences are how you sign in, how you pay, and how your content reaches us.
You access the Software inside Microsoft Teams. You sign in with your Microsoft Entra ID (Azure Active Directory) account, billing is handled by Microsoft through AppSource, and you submit content by uploading a file or sharing a meeting transcript in Teams.
You subscribe directly, billing is handled by Stripe, and you connect the Software to your own AI agent through the Model Context Protocol (MCP). Your agent may be Anthropic's Claude, Microsoft Copilot, or any other MCP-capable agent or large language model you choose. After you subscribe, you receive a unique connector URL that authenticates your access, and you submit content as text through your agent.
On the Microsoft Teams plan, we receive your Microsoft Entra ID identity, including your name, email address, and tenant identifier, used solely to authenticate your session and operate the Software.
On the direct plan, we hold a subscription record and a unique connector token. The token is stored only as a cryptographic hash and maps your connection to your subscription. Your name, email address, and billing details are collected and held by our payment processor, Stripe (see Section 8). We receive a subscription identifier and limited account information needed to provision and operate your access. We do not receive or store your full payment card number.
You submit content to the Software for behavioral analysis. On the Teams plan this may be an uploaded file (PDF, DOCX, TXT, or VTT meeting transcript). On the direct plan it is text submitted by your connected agent. In both cases, submitted content is held in session state during the active session and discarded when the session ends. It is not written to persistent storage at any point. Before analysis, submitted text is processed through Microsoft Azure AI Language to detect and remove personally identifiable information, including names, email addresses, and phone numbers.
The Software produces behavioral trait scores and a written read from the PII-redacted text. We retain only a limited, anonymized analytical record as described in Section 7. This record describes language patterns and does not contain the source text, the written read, or your identity.
We collect session metadata used for support and operations, such as session identifiers, timestamps, and word counts measured after PII scrubbing. This metadata contains no submitted content.
If you contact us for support, we collect the information you provide in that communication.
Content submitted to the Software passes through a deterministic pipeline inside the Microsoft Azure tenant:
On the direct plan, your AI agent, for example Anthropic's Claude, is operated by a third party and sits between you and us. Your text passes through that agent before it reaches our pipeline, and the read we return passes back through it to you. That agent's provider handles your data under its own privacy terms, which we do not control. See Section 8.
Where the General Data Protection Regulation (GDPR) applies, we rely on the following lawful bases. We process account, subscription, connector, and usage data as necessary to perform our contract with you and to provide the Software. We process the anonymized analytical record described in Section 7 on the basis of our legitimate interests in maintaining and improving the reliability and quality of the Software, an interest weighed against the privacy impact on data subjects, which is minimal because the record contains no identity, no account or tenant identifier, and no source content. Where content you submit contains the personal data of other individuals, you are responsible for establishing the lawful basis and obtaining any required consent for that content, as described in Section 11.
Pansophy AI does not collect, process, or infer any demographic information about the subjects of submitted content. This is an affirmative architectural design principle, not a policy limitation.
The behavioral analysis engine receives only anonymized word patterns after PII removal. It has no access to and makes no inference about:
The analysis methodology counts and categorizes word usage patterns using a validated psycholinguistic lexicon. It does not know who wrote or spoke those words. No demographic inference is performed at any stage of processing, not during PII scrubbing, not during scoring, and not during read generation.
This architecture means Pansophy AI cannot build demographic profiles, cannot use proxy variables to infer protected characteristics, and cannot produce outputs that vary based on the identity of a speaker rather than the content of their language.
Pansophy AI processes and stores data within Microsoft Azure's United States data centers, in the East US 2 region. Two exceptions apply, and both are limited to the direct subscription plan: payment data is collected and stored by Stripe on its own infrastructure (see Section 8), and content submitted through a connected AI agent passes through that agent provider's systems before it reaches our Azure pipeline. Apart from these, no submitted content is transmitted outside Microsoft Azure. Specifically:
We apply a split retention model. Content that you submitted, and anything derived from it that could reconstruct the source, is discarded at session close. The limited anonymized record we produce as our own work product is retained.
A session ends when you explicitly close it, when you submit new content for analysis, or after thirty (30) minutes of inactivity. You may request deletion of data associated with your account by contacting privacy@pansophyai.com. Submitted content and extracted text are not subject to deletion requests because they are already discarded at session close and never stored.
We do not sell, rent, or share your personal data with third parties for marketing or commercial purposes. We share data only in the following limited circumstances.
On the direct plan, you access the Software through a third-party MCP-capable AI agent that you choose and control, such as Anthropic's Claude or Microsoft Copilot. Your submitted text passes through that agent, and the returned read passes back through it. The provider of that agent processes your data under its own terms and privacy policy. Pansophy AI does not control, and is not responsible for, your agent provider's data practices, and you should review the privacy terms of the agent you connect.
Pansophy AI implements the following technical and organizational security measures:
While we implement industry-standard security measures, no system can guarantee absolute security. In the event of a data breach that affects your personal data, we will notify you and applicable regulatory authorities as required by law.
Automated processing: the Software produces behavioral trait scores and a written read as decision-support intended to inform human judgment. It does not make decisions that produce legal or similarly significant effects about any individual without human involvement, and it performs no demographic profiling (see Section 5 and our Responsible AI page).
Depending on your jurisdiction, you may have the following rights with respect to your personal data:
To exercise any of these rights, contact us at privacy@pansophyai.com. We will respond to valid requests within thirty (30) days and may require verification of your identity. Where your data is held by a subprocessor, such as billing data held by Stripe, we will direct or assist your request as appropriate.
Your rights apply to personal data about you. The anonymized analytical record described in Section 7 is Pansophy AI proprietary work product, contains no identity, and is not subject to these rights.
Important: You are solely responsible for obtaining any required consent from individuals whose words are contained in content you submit to the Software for analysis. Pansophy AI does not obtain consent directly from the subjects of submitted content. By submitting content, you represent and warrant that you have obtained all necessary consents under applicable law.
The Software is designed for professional and enterprise use. It is not directed at individuals under the age of 18. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us immediately at privacy@pansophyai.com.
The Software is operated from the United States, and all processing by Pansophy AI occurs in the Azure East US 2 region. On the Microsoft Teams plan, the Software is offered to Microsoft 365 tenants in the countries supported on its Microsoft AppSource listing, and eligibility is enforced at the AppSource listing level. The direct subscription plan is currently offered to customers in the United States.
If you access the Software from a supported location, your data will be processed in the United States, subject to United States law. If you believe personal data of an individual outside a supported location has been submitted to the Software, please contact us at privacy@pansophyai.com.
International data transfers: Pansophy AI processes personal data in the United States. The direct subscription plan is offered only to customers in the United States, and the Microsoft Teams plan is offered only in the countries supported by its Microsoft AppSource listing, with eligibility enforced at the listing level. We do not offer the Software in the European Economic Area, the United Kingdom, or Switzerland. If personal data originating from those regions is nonetheless submitted to the Software, it will be processed in the United States; where a cross-border transfer mechanism is required by applicable law, we will rely on an approved mechanism such as the applicable Standard Contractual Clauses.
We may update this Privacy Policy from time to time. We will post the updated Policy at this URL with an updated effective date. For material changes, we will provide notice through the Software or by email. Your continued use of the Software after the effective date of any update constitutes your acceptance of the revised Policy.
July 2, 2026 update: we added a Lawful Basis for Processing section, a right to lodge a complaint with a supervisory authority, an international data transfer statement, and an automated-processing disclosure. These additions clarify existing practices and do not change how the Software processes your content.
For privacy inquiries, data subject requests, or to report a privacy concern: