Privacy Policy

1. Information We Collect

Account Information: When you create an account, we collect your name, email address, and authentication credentials (via Google OAuth or email).

Usage Data: We collect information about how you use the Service, including agent configurations, task history, token usage, and feature interactions.

Agent Data: Content generated by your AI agents, including documents, messages, and files created during agent runs, is stored securely and associated with your account.

Payment Information: Payment details are processed and stored by Stripe. We do not store credit card numbers on our servers.

2. How We Use Your Information

We use your information to: (a) provide and maintain the Service; (b) process transactions and send billing notifications; (c) improve the Service through usage analytics; (d) communicate with you about updates, security alerts, and support; (e) enforce our Terms of Service.

3. Data Storage and Security

Your data is stored in Supabase (managed PostgreSQL) with row-level security policies ensuring multi-tenant data isolation. Each customer can only access their own data. Files are stored in encrypted cloud storage with signed URL access controls.

We use industry-standard security measures including: TLS encryption in transit, AES-256 encryption at rest, JWT-based authentication, server-side rate limiting, and regular security audits.

4. Data Sharing

We do not sell your personal information. We may share data with: (a) service providers who help operate the Service (Supabase, Stripe, Anthropic); (b) law enforcement when required by law; (c) third-party integrations you explicitly authorize (Gmail, Slack, etc.).

5. AI Model Providers

Agent conversations are processed by AI model providers (Anthropic, OpenAI, Google) to generate responses. These providers may process your prompts and agent inputs according to their own data policies. We do not send your data to AI providers for training purposes.

6. Your Rights

Access: You can request a copy of your data at any time.

Deletion: You can request deletion of your account and associated data. We will process deletion requests within 30 days.

Portability: You can export your agent configurations and data through the Service.

Correction: You can update your account information at any time through the dashboard.

7. Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies or third-party advertising cookies.

8. Data Retention

We retain your data for as long as your account is active. Upon account deletion, we will delete your data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).

9. International Data Transfers

Your data may be processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for international data transfers in compliance with GDPR and applicable data protection laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service.

11. Contact

For privacy-related questions or to exercise your rights, contact us at privacy@reevvos.com.