Privacy Policy

Account Information: Email address, name, organization details

Organization Data: Organization name, member roles, billing information

Agent Metadata: Agent names, types, classification data, governance settings

Governance Events: Policy evaluations, decisions, timestamps, human review actions

Evidence Receipts: SHA-256 hashes, governance decision records

Connector Data: Webhook URLs, API key hashes (encrypted)

• Provide and operate the AGEI platform

• Process governance events and policy evaluations

• Generate evidence receipts and audit trails

• Send service notifications and updates

• Respond to support requests

• Analyze platform usage for improvements

We send email for:

• Account verification and password reset

• Human review queue notifications (HITL/HOTL)

• Billing and subscription updates

• Critical platform notifications

Email delivery is powered by SendGrid. You may configure email preferences in your account settings.

AGEI uses an archive, never delete model for governance data:

• Governance events and evidence receipts are retained permanently

• Agent and policy records are soft-deleted (archived) when removed

• Account data is retained as long as your account is active

• Deleted organizations may be archived for compliance purposes

• Data encrypted in transit (HTTPS/TLS)

• Data encrypted at rest via Supabase

• API keys stored encrypted

• Row-level security enforces organization isolation

• Zero-trust architecture and fail-closed behavior

Supabase: Database and authentication

Stripe: Payment processing and billing

SendGrid: Email delivery

Vercel: Hosting and deployment

• Access your data via the AGEI dashboard

• Update account information

• Request data export

• Delete your account (subject to retention requirements)