Privacy Policy

At Auteryn, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI agent platform.

Important: Your data is never used to train AI models. All interactions are private to your organization.

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, subscribe to our waitlist, or contact us for support:

• Name and email address
• Account credentials
• Payment information (processed securely by Stripe)
• Usage data and analytics
• Communications you send to us

Agent & Platform Data

When you use Auteryn, we also process:

• Knowledge Base Data: Documents and files you upload for agents to reference
• Agent Interaction Logs: Task histories, conversation logs, and execution records
• Connector Credentials: OAuth tokens and API keys for integrations (stored encrypted; revoked when you disconnect the integration)
• Desktop Session Data: Screenshots and recordings from Computer Use sessions (deleted after task completion unless you save them)

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Monitor and analyze trends, usage, and activities
• Detect, prevent, and address technical issues or fraud

4. Data Sharing & Third Parties

We do not sell your personal data. We may share information with these categories of third parties:

• Cloud Infrastructure: Amazon Web Services (AWS) and Google Cloud Platform for hosting, storage, and sandbox compute
• AI Model Providers: Google (Gemini API), AWS Bedrock (Anthropic Claude), and Microsoft Azure (Azure OpenAI Service) — depending on the model you select per agent
• Voice & Telephony: LiveKit carries the real-time audio for every voice session, browser and phone. Within a session: Deepgram (speech-to-text), Google (voice synthesis, and Gemini Live where the agent uses a preset voice), and Cartesia (voice synthesis) where the agent uses a voice cloned from a recording. Twilio carries SMS and inbound phone calls (where you enable these features)
• Web Search: Serper.dev receives the search terms an agent derives from your request when it uses web search
• Authentication: Google Firebase for sign-in
• Payment Processing: Stripe for secure payment handling
• Error Monitoring: Sentry receives error and performance telemetry, which can include your organization and user identifiers and fragments of the activity log leading up to a fault
• Analytics: Google Analytics on the marketing site. Analytics cookies are set only after you accept via the cookie banner; before that, Google Consent Mode limits us to anonymous, cookieless measurement
• Connectors: Third-party services you explicitly authorize (e.g., GitHub, Slack, Google Workspace)

Google Workspace Data — Limited Use

When you connect a Google account, Auteryn requests only the scopes needed for the features you enable, and you can revoke that access at any time from your Google Account or from the Integrations page in Auteryn. Auteryn’s use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google user data only to provide and improve the features you explicitly asked the agent to perform
• We do not transfer Google user data to third parties except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger or acquisition
• We do not use Google user data for advertising, and we do not sell it
• We do not allow humans to read Google user data unless you give explicit consent for specific messages, it is necessary for security purposes such as investigating abuse, it is required to comply with applicable law, or the data has been aggregated and anonymized
• Google user data is never used to train the AI models we or our model providers operate

All third-party processors are bound by data processing agreements and are required to protect your data in accordance with applicable laws.

5. Data Security

We implement robust technical and organizational measures to protect your data:

• Encryption at Rest: AES-256 encryption for all stored data
• Encryption in Transit: TLS for all data transmission
• Access Control: Role-based access control — owner, admin, member, customer, and guest roles gate what each account can do
• Audit Logging: Comprehensive logs of all system access
• Temporary Tokens: Agent connector credentials are short-lived and scoped; revoking the connection stops access

6. Data Retention

We retain your personal data only for as long as necessary:

• Account Data: Retained while your account is active and deleted after account closure, except where law requires longer retention
• Agent Logs: Retained for a limited, plan-based period for audit purposes, then deleted
• Knowledge Base: Deleted upon your request or account closure
• Desktop Sessions: Deleted after task completion unless you explicitly save them

7. Your Rights

Depending on your location, you have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a portable format
• Opt-out: Unsubscribe from marketing communications
• Restriction: Request limitation of processing in certain circumstances

To exercise these rights, contact us at privacy@auteryn.ai. We respond to verified requests within 30 days, or sooner where local law requires.

8. International Users

Company Location

Auteryn Inc. is a Delaware C Corporation. Your personal data is primarily stored and processed in the United States on AWS and Google Cloud infrastructure. Enterprise plans can be deployed to a dedicated cloud account, which supports regional data-residency requirements.

United States (state privacy laws)

Residents of California (CCPA/CPRA) and other US states with comprehensive privacy laws have the rights to know, access, correct, delete, and opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined in those laws, so there is nothing to opt out of; we honor Global Privacy Control signals consistent with that position. We will not discriminate against you for exercising your rights.

Canada (PIPEDA)

For users in Canada, we handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA): we collect it with consent, use it only for the purposes described in this policy, and provide access and correction on request. Our commercial electronic messages comply with CASL — marketing email is sent only with consent and always includes a working unsubscribe.

India (DPDP Act)

For users in India, we process digital personal data in accordance with the Digital Personal Data Protection Act, 2023. You have the rights to access, correction, and erasure of your personal data, and to grievance redressal. Our grievance channel is privacy@auteryn.ai — we acknowledge grievances promptly and resolve them within the timelines the Act prescribes. If you are not satisfied with our response, you may approach the Data Protection Board of India.

Singapore (PDPA)

For users in Singapore, we handle personal data in accordance with the Personal Data Protection Act 2012: we collect, use, and disclose personal data with consent and for reasonable purposes, and we provide access and correction on request. Questions for our designated Data Protection Officer can be sent to privacy@auteryn.ai.

European Union & United Kingdom (GDPR / UK GDPR)

If you are in the European Economic Area or the United Kingdom, we process your data under the GDPR and UK GDPR respectively. Auteryn Inc. acts as the data controller for account data and as a processor for the content your organization brings to the platform. Our legal bases include contract performance, legitimate interests, and your consent where required. You may lodge a complaint with your local supervisory authority.

Data Transfers

Auteryn Inc. is based in the United States. If you access our services from outside the United States, your data will be transferred to and processed in the United States, where data protection laws may differ from those in your country. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses where applicable.

9. Cookies & Tracking

We use essential cookies to operate our service and optional analytics cookies to understand how you use our platform. For detailed information, see our Cookie Policy.

10. Children's Privacy

Auteryn is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through a prominent notice on our website. Your continued use of Auteryn after changes indicates acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@auteryn.ai
• General Inquiries: contact@auteryn.ai
• Mailing Address:
  Auteryn Inc.
  c/o Legalinc Corporate Services Inc.
  131 Continental Dr, Suite 305
  Newark, DE 19713, USA