Privacy Policy

Information We Collect

• Account and identity: name, email address, authentication identifiers, and organization details you provide.
• Billing: subscription status, invoices, and payment-related metadata. Card data is processed by our payment provider; we do not store full card numbers on our servers.
• Service data: prompts, code, task history, agent outputs, and configuration needed to operate verification and collaboration features you initiate.
• Technical and usage: IP address, device and browser type, timestamps, diagnostics, and aggregated usage metrics to secure the Services and improve reliability.
• Communications: messages you send to support and records needed to respond.

How We Use Information

We use personal information to:

• Provide, maintain, and secure the Services;
• Authenticate users, process payments, and manage subscriptions;
• Detect, prevent, and address fraud, abuse, and security incidents;
• Communicate about the Services, including transactional notices and (where allowed) product updates;
• Comply with law and enforce our terms.

Legal Bases (EEA, UK, Switzerland)

Where the GDPR or similar laws apply, we rely on: performance of a contract; legitimate interests in securing and improving the Services; consent where required (for example, certain cookies or marketing); and legal obligations.

Sharing and Processors

We share information with service providers that process data on our instructions (“processors”), including infrastructure and application hosting, payment processing, email delivery, and analytics. We may also disclose information if required by law, to protect rights and safety, or in connection with a merger or asset sale, subject to appropriate safeguards.

Primary infrastructure and security processing may occur on Cloudflare (network, Workers, and related edge services). Payments are processed by Stripe. Subprocessors may change; we will update this page for material changes.

International Transfers

We may process and store data in the United States and other countries. Where we transfer personal data from the EEA, UK, or Switzerland, we use appropriate safeguards such as the EU Standard Contractual Clauses or other mechanisms recognized by applicable law.

Retention

We keep personal information for as long as your account is active, as needed to provide the Services, and for legitimate business and legal purposes such as tax, accounting, and dispute resolution. Retention periods may vary by data category.

Security

We use administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

Your Rights

Depending on your location, you may have the right to access, correct, delete, or port your data; object to or restrict certain processing; and withdraw consent where processing is based on consent. You may also lodge a complaint with a supervisory authority. To exercise these rights, contact us at the email below. We will respond in accordance with applicable law.

If you are a California resident, you may have additional rights under the CCPA/CPRA regarding access, deletion, and opt-out of certain “sales” or “sharing” of personal information. We do not sell personal information for money. You may use our contact channel to submit requests.

Children

The Services are not directed to children under 16, and we do not knowingly collect personal information from children. Contact us if you believe we have collected a child’s information.

Changes

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date. For material changes, we will provide additional notice where required.

Contact

Privacy questions and requests: support@pantokratorai.com. You can also reach us through the contact page.