1. Information We Collect
We collect information you provide directly to us:
- Account information (name, email address, password)
- Billing information (payment method details processed by Stripe)
- Training data you upload (documents, URLs, text)
- API usage data and agent configurations
- Communications you send to us (support requests, feedback)
2. Automatically Collected Information
When you use the Service, we automatically collect:
- Log data (IP address, browser type, access times)
- Device information (operating system, device identifiers)
- Usage metrics (API request counts, feature usage)
- Cookies and similar tracking technologies for session management, analytics, and advertising measurement
3. How We Use Your Information
We use collected information to:
- Provide, maintain, and improve the Service
- Process transactions and send billing notifications
- Send technical notices and security alerts
- Respond to your requests and provide support
- Monitor and analyze usage trends
- Detect, prevent, and address fraud or abuse
4. Your Training Data
Training data you upload is used solely to provide the Service to you. We do not use your training data to train our own models, share it with third parties, or use it for any purpose other than powering your AI agents. Your training data is stored encrypted at rest and deleted within 30 days of account cancellation.
5. Connected Store & Integration Data
When you connect a third-party platform to your agent (such as a Shopify store or a messaging channel), your agent accesses data from that platform only to serve your customers:
- Order details and the customer email field are used solely to answer a customer's question about their own order, after the email they provide is verified against the order.
- We do not maintain a separate database of your customers' platform data. Information surfaced in a conversation is retained only as part of that conversation transcript, subject to your plan's retention period.
- Integration credentials are encrypted at rest and deleted automatically when you disconnect the integration or uninstall the connected app.
- Messaging-channel profile details (such as a customer's display name) are used to personalize replies within that conversation.
6. Data Sharing
We do not sell your personal information. We may share information with:
- Service providers who assist in operating the platform (hosting, payment processing, email delivery)
- Third-party AI model providers when processing agent requests (only the query and relevant context are sent, not your account data)
- Analytics and advertising providers, limited to how you use our marketing pages and whether you signed up — see Cookies below
- Law enforcement when required by law or to protect our rights
7. Data Security
We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest, scoped API keys, and regular security audits. However, no method of transmission or storage is 100% secure.
8. Data Retention
We retain your account information for as long as your account is active. Training data and agent configurations are deleted within 30 days of account cancellation. Usage logs are retained for up to 12 months for analytics and security purposes.
9. Your Rights
You have the right to:
- Access and export your personal data
- Correct inaccurate information
- Delete your account and associated data
- Object to processing of your data
- Withdraw consent where applicable
10. Cookies
We use cookies and similar technologies in three ways:
- Essential — for authentication and session management. The Service does not work without these.
- Analytics — Microsoft Clarity records how visitors use our marketing pages (interactions, scrolling, and general navigation) so we can improve them.
- Advertising — the Meta pixel tells us whether a visitor who arrived from one of our ads went on to create an account or subscribe. It sets Meta cookies (
_fbp, and _fbc if you arrived via an ad) and shares the fact of that visit or signup with Meta, which uses it as an independent controller under its own privacy policy.
We do not sell your data or use these tools to profile the contents of your conversations. You can block or delete cookies through your browser settings, and browser-level tracking protection or an ad blocker will prevent the analytics and advertising cookies from being set at all. Blocking them does not affect your use of the Service.
11. Children's Privacy
The Service is not intended for users under the age of 16. We do not knowingly collect information from children under 16.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service.