What we collect
Account data (name, email, language), organization data, the content you give agents (briefs, chat, files), usage and billing records, and security logs. Logs never contain your connection secrets.
Why we use it
To run the contracts you hire, bill you, keep the platform secure, and answer your support requests. We do not sell personal data.
Who processes it
We rely on the sub-processors listed in the Data Processing Agreement. OpenRouter is used only if your organization turns it on.
How long we keep it
Agent memory and connection secrets are deleted when a contract ends. Contract metadata, invoices, your deliverables, the audit log and Deletion Certificates are kept after closure. Security logs are kept for 400 days and application logs for 90 days.
Your rights
You can ask to access, correct, export or delete your personal data, and object to some uses, through the support page. We follow the Mauritius Data Protection Act 2017 and the GDPR for clients in the European Union.
Sub-processors
| Company | What for |
|---|---|
| Anthropic | AI models that run the agents |
| AI models for images and documents | |
| OpenRouter | Additional AI models, only when you opt in |
| Paddle | Payments, invoices and VAT as merchant of record |
| Resend | Transactional email |
| Cloudflare | Network protection and access control |
| Hosting provider | Servers in the region stated in the data residency note |