Privacy Policy

Account Information: When you create an account or join our waitlist, we collect your name, email address, company name, and role.

Usage Data: We automatically collect information about how you interact with our platform, including pages visited, features used, and session duration.

Technical Data: We collect your IP address, browser type, operating system, and device information for security and optimization purposes.

Payment Information: Payment details are processed securely by Stripe. We do not store your credit card numbers on our servers.

We use the information we collect to:

• Provide, maintain, and improve our platform
• Process your transactions and manage your subscription
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and customer service requests
• Monitor and analyze trends, usage, and activities to improve user experience
• Detect, investigate, and prevent fraudulent or unauthorized activity
• Comply with legal obligations and enforce our terms of service

Your data is stored securely using industry-standard encryption. We use Supabase (PostgreSQL) as our primary database provider, with data encrypted both at rest and in transit.

On-Premise Data: The core value of OnPremiseAgent is that your AI agent data stays on your infrastructure. We never access, store, or process the data your deployed agents work with. Your operational data never leaves your building.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

We use the following third-party services to operate our platform:

• Supabase — Database and authentication (data stored in secure cloud infrastructure)
• Stripe — Payment processing (PCI DSS compliant)
• Resend — Transactional emails (email address and name only)
• PostHog — Product analytics (anonymized usage data, self-hosted option available)
• Vercel — Website hosting and edge delivery

Each third-party provider has their own privacy policy governing the use of your information.

If you are located in the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). You have the right to:

• Access your personal data and receive a copy
• Rectify inaccurate or incomplete personal data
• Erase your personal data ("right to be forgotten")
• Restrict the processing of your personal data
• Data portability — receive your data in a structured, machine-readable format
• Object to the processing of your personal data
• Withdraw consent at any time where we rely on consent as a legal basis

To exercise any of these rights, please contact us at the email address below. We will respond within 30 days.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.

Account data is retained for the duration of your subscription. Upon account deletion, we remove your personal data within 30 days, except where retention is required by law.

Waitlist and contact form submissions are retained for up to 24 months after the last interaction.

We use cookies and similar tracking technologies to enhance your experience. For detailed information about the cookies we use, please see our Cookie Policy.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this page periodically.

If you have any questions about this Privacy Policy or our data practices, please contact us: