1. Plain-English summary
We collect the minimum we need to run an AI marketplace: account details, a record of what you bought, and operational telemetry from the agents you run. We never sell data, and we never feed your business prompts back into model training.
The short version: Your data is yours. We hold it under contract, encrypt it both in transit (PQC + TLS 1.3) and at rest, and give you a one-click export and delete.
2. Data we collect
- Account data: name, work email, organisation, hashed password, and login timestamps.
- Billing data: billing address, VAT/tax ID, last-4 of card and brand. Card numbers are tokenised by Stripe and never reach our servers.
- Operational telemetry: request volumes, error rates, model latencies, and security-event signals from the agents you run.
- Support content: tickets, attachments, and email threads you send us.
3. How we use data
- To provision the agents you bought and bill the corresponding subscription.
- To detect abuse, fraud, and prompt-injection attempts.
- To improve reliability — error rates and latency telemetry only, never prompt content.
- To send transactional and security email (you can disable marketing email separately).
We do not use customer prompt content, document attachments, or output to train any model — ours or anyone else's.
4. Legal basis (GDPR)
- Contract: running the service you signed up for.
- Legitimate interest: keeping the platform secure and reliable.
- Legal obligation: tax records, fraud prevention, and incident reporting.
- Consent: optional analytics and marketing email — you can withdraw any time.
5. Sharing & subprocessors
We use a short, vetted list of subprocessors. Each is bound by a Data Processing Agreement and is reviewed annually.
- Stripe — payment processing.
- AWS / hosting region: EU-Frankfurt by default; US-East available on request.
- Cloudflare — edge TLS and DDoS protection.
- SMTP relay — transactional email delivery.
6. Retention
- Account & billing records: 7 years (legal/tax minimum) after account closure.
- Operational telemetry: 13 months, aggregated thereafter.
- Support tickets: 24 months.
- Audit logs: 12 months minimum, configurable up to 7 years per regulator.
7. Your rights
Under GDPR/UK-GDPR/DPDP and equivalent regimes you can request access, correction, deletion, restriction, portability, and objection. The dashboard exposes one-click export and account deletion. For anything else, email [email protected] and we'll respond within 30 days (often faster).
8. Security
- TLS 1.3 in transit, ML-KEM-768 + AES-256-GCM envelope encryption between UI and API.
- AES-256 at rest, customer-controlled KMS available on Enterprise plans.
- SAST + dependency scanning on every commit; SOC 2 Type II programme in flight.
- Prompt-injection guardrails and content filters applied before any model call.
9. Contact
Data Protection Officer: [email protected]. Postal: OpsVanguard, No 24, Medahena road, Welegoda, Matara 81000, Sri Lanka. We answer within one business day.