Operational draft · Version 2026-08-25

Privacy Notice

This early-access document is an operational draft pending legal and tax counsel. It does not replace mandatory rights under applicable law.

This notice explains the minimum data needed to operate an isolated customer agent.

Data we process

We process account and organization details, selected capabilities, payment status and evidence references, runtime health, audit events, support records, usage counters, and content a customer intentionally sends to its agent.

WhatsApp data

For QR-linked WhatsApp, encrypted session material is kept in the tenant runtime volume. QR payloads are encrypted and short-lived. We do not ask customers to send passwords, recovery codes or payment-card data through chat.

Isolation and vendors

Each tenant is assigned a separate runtime boundary and workspace. Approved infrastructure, model, messaging and payment vendors may process limited data needed to provide their service. Provider scopes and retention are governed separately.

Retention and rights

Operational records are retained only as needed for service, security, billing, legal obligations and dispute handling. Access, correction, export or deletion requests are handled subject to identity verification and applicable law.