Privacy Policy

What we collect

• Account data: your email address, name and password hash.
• Workspace data: the customers, deals, tickets, projects, tasks, invoices, documents, knowledge and messages your organisation stores in the product.
• Connection data: tokens and settings for the systems your organisation connects, sealed at rest.
• Usage data: which actions were planned, approved and executed, by whom and when; model calls with model, route, tokens and cost — never the prompt text.
• Technical data: request logs with timestamps and coarse origin for security and reliability.

Why

To provide the service to your organisation, to enforce its permissions and approvals, to bill the subscription, to keep the service secure and to measure its cost. We do not sell personal data and we do not use workspace data to train models.

Processors

Model providers receive the text needed for a task through a gateway; the systems your organisation connects receive the actions your organisation approved; a payment processor handles subscriptions. Each is engaged under its own terms; none receives more than the task requires.

Retention

Workspace data is kept while the organisation's account exists and for a limited period after closure to allow export; usage and audit records are kept for accounting and security; verification and reset tokens expire and are single-use.

Your rights

Access, correction, export and deletion requests are handled through your organisation's owner or by writing to us. Where law grants further rights, they apply.

Changes

A new version carries a new date and is presented for acceptance on next sign-in; earlier acceptances are kept on record.