Privacy Policy

Last updated: January 1, 2026

1. Data We Collect

We collect information you provide directly: account details (email, name, company), agent configurations, and usage data for our services. We also collect technical data automatically: IP addresses, browser type, device identifiers, and interaction logs for security and performance purposes.

2. How We Use Your Data

We use your data to provide, maintain, and improve our service: issuing and verifying tokens, managing agents, and enforcing policies. We use audit logs for security monitoring and compliance. We do not sell your data to third parties.

3. Third-Party Processors

We use third-party services for infrastructure (cloud hosting), billing (payment processing), and analytics. These processors are bound by data protection agreements and only access data necessary for their specific functions.

4. Data Security

We implement industry-standard security measures: encryption at rest and in transit, access controls, and monitoring. Audit logs are hash-chained and cryptographically verifiable. See our security page for details.

5. Your Rights

You can access, correct, or delete your personal data through your account settings. You can export your data in standard formats. You can revoke agent credentials and tokens at any time. Contact us for data deletion requests.

6. Data Retention

Account data is retained while your account is active and for 30 days after deletion. Audit logs are retained according to your plan's retention period (7-90 days). Security logs may be retained for up to 2 years for incident response.

7. Cookies

We use essential cookies for authentication and session management. We use analytics cookies to understand service usage. You can disable non-essential cookies in your browser settings.

8. Contact

For privacy-related questions or requests, contact us at privacy@authrai.tech.