Privacy Policy

1. Information We Collect

Account Information

When you sign up via Google OAuth, we collect your name, email address, and profile picture. We do not store your Google password.

Payment Information

When you subscribe to a paid plan, payment details are processed securely by Stripe. We store your Stripe customer ID and subscription status but never your full card number.

Agent & Usage Data

We collect information about the AI agents you create, including configuration settings, connected channels, deployment status, and event logs. This data is used to provide, monitor, and improve the service.

Automatically Collected Data

We may collect device information, browser type, IP address, and usage analytics to improve our platform and diagnose technical issues.

2. How We Use Your Information

• Provide, operate, and maintain our platform and services
• Process payments and manage your subscription
• Deploy and manage your AI agents on cloud infrastructure
• Communicate with you about your account, updates, and support requests
• Monitor and analyze usage patterns to improve performance and user experience
• Detect, prevent, and address security threats, fraud, or technical issues
• Comply with legal obligations

3. Data Sharing & Third-Party Services

We do not sell your personal information. We may share data with the following categories of third-party service providers, strictly to operate the platform:

• Authentication: Supabase (Google OAuth, session management)
• Payments: Stripe (subscription billing and invoicing)
• AI Models: Third-party AI providers (to power your agent's capabilities)
• Messaging Channels: Telegram, WhatsApp, Discord, Slack (to connect your agents)
• Infrastructure: Cloud hosting providers for agent deployment and execution

4. Data Security

We implement industry-standard security measures including encryption in transit (TLS), row-level security policies on our database, and secure authentication flows. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your account data for as long as your account is active or as needed to provide services. Agent event logs may be retained for a limited period for debugging and analytics purposes. When you delete your account, we will delete or anonymize your personal data within 30 days, except where required by law.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Export your data in a portable format

To exercise any of these rights, please contact us at the address below.

7. Cookies & Local Storage

We use cookies and browser local storage for authentication sessions and theme preferences. We do not use third-party advertising or tracking cookies.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date.

9. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at hello@hast.so.