How we handle your data

1 · Data Collection

We collect only what we need to turn your automation conversations into working software. During a voice or text interview we capture:

• The interview transcript — your spoken or typed answers about a process you want to automate
• Structured requirements extracted from that conversation (goals, inputs, outputs, constraints)
• Documents you choose to upload (decks, SOPs, brand guides) to give context
• Account and workspace details: your name, email, role, company name, and logo
• Operational metadata: project status, agent run history, and usage metrics

We do not record audio beyond what is needed to produce the live transcript, and we never use your business data to train third-party foundation models.

2 · Data Storage

All customer data is hosted on Microsoft Azure infrastructure located in the European Union. Your data does not leave the EU in the normal course of operation.

• EU region — databases, file storage, and backups are provisioned in EU data centres
• Tenant isolation — each client's projects, documents, and agents are scoped to their own workspace and are never visible to other tenants
• Retention — data is kept while your account is active; after deactivation, personal identifiers are anonymised and remaining records are reviewed for deletion within 365 days

3 · Security

Security is enforced in depth, from the network edge down to individual records.

• Encryption in transit — all traffic is served over TLS (HTTPS)
• Encryption at rest — databases, file storage, and backups are encrypted on disk
• Access control — role-based access control (RBAC) restricts every action to the user's role; clients only ever see their own workspace
• Authentication — short-lived JWT access tokens with refresh-token rotation and token blacklisting on logout; multi-factor authentication is available
• Auditability — sensitive actions are written to an immutable audit log

4 · Sub-processors

We rely on a short, deliberately minimal list of sub-processors to operate the platform. We do not sell your personal data to anyone.

• Microsoft Azure — cloud hosting, database, and file storage (EU region)
• OpenAI — large-language-model processing that powers the interview, requirements extraction, and agent capabilities. Business data is processed under terms that exclude model training.

If we add or change a sub-processor, we will update this page before the change takes effect.