This Privacy Policy explains what personal data Angareion, Inc. ("Angareion," "we") collects, how we use it, and who we share it with, when you or your organization ("Customer," "you") use Angareion (the "Service").
1. Data We Collect
We collect:
- Account data — email address, password (hashed), name, and organization details you provide at signup and in account settings.
- Customer Data — the events, memories, documents, and outputs your organization or its AI agents submit to the Service, and metadata about it (timestamps, source, tags, project associations).
- Usage data — API/agent request logs, feature usage, and error reports, used to operate, secure, and improve the Service.
- Payment data — for paid plans, billing details are collected and stored by our payment processor directly; Angareion does not store full card numbers.
2. How We Use Data
We use the data above to:
- Provide the Service — store, index, search, and deliver Customer Data to the agents you authorize;
- Operate account and billing functions (signup, authentication, plan enforcement, invoicing);
- Secure the Service — detect abuse, enforce rate limits and quotas, and investigate incidents;
- Send service email — one-time codes, password resets, and operational notices (not marketing, unless you opt in);
- Improve the Service, using aggregated or de-identified data where feasible.
3. Subprocessors
We share data with the following categories of subprocessors, each engaged solely to provide the Service and each bound by a data-processing agreement:
- OpenAI, L.L.C. — generates vector embeddings of Customer Data for search and retrieval, and performs structured-memory extraction from ingested documents.
- Anthropic, PBC — powers agent-facing composition/reasoning features that operate over Customer Data you or your agents request.
- Amazon Web Services, Inc. — hosts the Service's infrastructure (compute, storage, and email delivery via Amazon SES) in the United States.
- Neo4j Sweden AB (Aura) — hosts the managed graph database used to store relationships between memories and outputs.
- Cloudflare, Inc. — provides DNS and content delivery for parts of the Service.
- [Payment processor — to be named once selected] — processes billing for paid plans.
We do not sell Customer Data, and we do not use Customer Data to train models on behalf of our subprocessors beyond what is strictly required to provide the features above.
4. Data Retention and Deletion
We retain Customer Data for as long as your account is active, or as needed to provide the Service. When you delete a memory, document, or output, or close your account, we delete or anonymize the corresponding data within a commercially reasonable period, except where retention is required by law or to resolve disputes.
5. Data Security
Customer Data is logically isolated per tenant using database row-level security, and access is authenticated and audited. We use industry-standard safeguards, but no service can guarantee absolute security; see our Terms of Service for the applicable disclaimers.
6. Your Rights
Depending on your location, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. Contact us at privacy@angareion.com to exercise these rights; we will respond within the time required by applicable law.
7. International Transfers
[Placeholder — cross-border transfer mechanism (e.g. SCCs) to be confirmed by counsel based on where Customer Data and subprocessors are located.]
8. Changes to This Policy
We may update this policy from time to time. For material changes we will provide notice before the change takes effect. Continued use of the Service after a change takes effect constitutes acceptance.
9. Contact
Questions about this policy: privacy@angareion.com.