Privacy Policy

1. Information We Collect

We collect the following information:

• Account data: Email address and authentication credentials when you create an account.
• API keys: LLM provider API keys you provide, stored encrypted and used only server-side.
• Agent data: Agent configurations, system prompts, and run history you create through the Service.
• Usage data: Run counts, token usage, and performance metrics for your agents.

2. How We Use Your Information

• To provide and maintain the Service
• To authenticate you and secure your account
• To make LLM API calls on your behalf using your provided API keys
• To display run history, logs, and usage statistics
• To enforce service limits and prevent abuse
• To improve the Service using anonymized, aggregated data

3. Data Storage and Security

Your data is stored in Supabase with row-level security enabled. API keys are encrypted at rest and only accessed server-side. We use industry-standard security practices to protect your data.

4. Third-Party Services

When your agents run, your data is sent to the LLM provider you selected (Anthropic, OpenAI, or Google) using your API key. Each provider has their own privacy policy governing how they handle that data. We also use:

• Supabase for authentication and database storage
• Resend for transactional emails (if configured)
• Stripe for payment processing (paid plans)

5. Shared Agents

When you enable sharing on an agent, the agent's name, description, and model are visible to anyone with the share link. Your system prompt, API keys, and other configuration details are never exposed through shared links.

6. Data Retention

We retain your data for as long as your account is active. When you delete your account, all associated data (agents, runs, API keys, workflows) is permanently deleted. Run logs are retained for up to 90 days after account deletion for abuse prevention.

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and all associated data
• Export your agent configurations
• Withdraw consent for data processing

8. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or through the Service.

10. Contact

Questions about this policy? Reach out through our feedback page.