Privacy Policy

1. Introduction

AgentVault8.ai ("we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using AgentVault8.ai, you consent to the practices described in this policy.

2. Information We Collect

We collect information you provide directly, including:

• Account data: Name, email address, and password (hashed) when you register
• Billing data: Payment method details processed securely by our payment provider (Stripe)
• Configuration data: Agent definitions, policy rules, integration settings
• Support data: Information you provide when contacting support

We also collect information automatically:

• Usage data: API request logs, token issuance events, audit records
• Technical data: IP address, browser type, operating system, referring URLs
• Cookies: Session tokens and preference cookies — see Section 8

3. How We Use Your Information

We use collected information to:

• Provide, operate, and improve the Service
• Process transactions and send billing notifications
• Enforce our Terms of Service and security policies
• Respond to support requests and communications
• Send product updates and security notices (you may opt out of marketing)
• Detect, investigate, and prevent fraud or abuse
• Comply with legal obligations

4. Secret Redaction

AgentVault8.ai automatically scrubs PII patterns — including email addresses, phone numbers, and payment card numbers — from all purpose fields and audit log entries before they are stored. Raw credentials and secrets are encrypted at rest using AES-256 and are never stored in plaintext.

5. Information Sharing

We do not sell, rent, or trade your personal information. We may share it with:

• Service providers: Subprocessors (hosting, payments, email) who process data on our behalf under strict data protection agreements
• Legal requirements: When required by law, court order, or to protect the safety of users or the public
• Business transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to affected users

6. Data Retention

We retain your account data for as long as your account is active, and for a reasonable period thereafter to comply with legal obligations. Audit logs are retained for the duration specified in your plan (7 days for Starter, 90 days for Pro, unlimited for Enterprise). You may request deletion of your data at any time — see Section 10.

7. Security

We implement industry-standard security measures including TLS 1.3 encryption in transit, AES-256 encryption at rest, SOC 2 Type II aligned controls, and regular penetration testing. Despite these measures, no system can guarantee absolute security. You are responsible for maintaining the security of your account credentials.

8. Cookies

We use strictly necessary cookies for session management and authentication. We do not use advertising or tracking cookies. You can control cookie behaviour through your browser settings, though disabling session cookies will prevent you from logging in.

9. International Transfers

Your data is processed and stored in the United States. If you access the Service from outside the US, you consent to the transfer of your data to the US, where data protection laws may differ from those in your country.

10. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing activities
• Data portability — receive your data in a machine-readable format
• Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at info@agentvault8.ai. We will respond within 30 days.

11. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or a prominent notice on the Service at least 14 days before the changes take effect. Your continued use of the Service after that date constitutes acceptance of the revised policy.

13. Contact

For privacy-related questions or concerns, contact our Data Protection team at info@agentvault8.ai.