Legal
Privacy Policy
Last updated October 21, 2026
Draft for review. Not in effect until Phillip opens for signup.
This policy covers Phillip, the hosted AI assistant from Bedford AI, a division of Linnflux, Inc., and this website. For the data your people put into Phillip, your company is in charge of that data and we process it on its behalf.
What we collect
- Account details: each person's name and work email address, from their sign-in.
- Content: conversations, uploaded files, company library documents, the company brief, and each person's saved memories.
- Usage records: how much AI usage each person has used, and technical logs needed to run and secure the service.
- Billing details: your company's billing contact and plan. Card numbers go straight to Stripe; we never see or store them.
This website
hiphillip.com has no advertising or analytics trackers. Our fonts are hosted here, not loaded from other companies. Sign-in uses cookies only to keep you signed in and to protect the sign-in from tampering.
How we use it
- To run Phillip for your company: answer questions, search your library, remember what each person asked it to.
- To support you, fix problems, and keep the service secure.
- To bill your company and send service notices.
We do not sell personal information, do not use it for advertising, and do not use your content to train AI models.
Who processes it for us
| Provider | What for |
|---|---|
| Amazon Web Services | Hosting your Phillip and its nightly backups, in the United States |
| Cloudflare | This website, secure connections to your Phillip, and the Bedford AI sign-in service |
| Anthropic | Claude AI models that write Phillip’s answers |
| OpenAI | GPT models, indexing your company library, and saving personal memory |
| Mailgun | Sending sign-in codes |
| Sign-in, if your company uses Google Workspace | |
| Stripe | Payments and invoices |
Anthropic and OpenAI receive the parts of a conversation needed to answer it. Under their business API terms they do not train on it, and they delete it within about 30 days unless the law requires longer. See Security and data.
How long we keep it
- Conversations and files stay until the person or your admin deletes them, or until your company cancels.
- Nightly backups are kept for 14 days.
- After cancellation we keep your data 30 days for export, then delete it.
- Billing records are kept as long as tax law requires.
Your choices
- Each person can view and delete their own conversations and memories in Phillip at any time.
- To access, correct, export or delete other personal information, ask your company's Phillip admin or email us.
Children
Phillip is a workplace tool for adults and is not meant for anyone under 18.
Changes
We will post updates here and email your admins about material changes.
Contact
Linnflux, Inc., doing business as Bedford AI, 1118 Olean Rd, East Aurora, NY 14052. [email protected]