Privacy notice · updated 2026-07-28

Data handling is part of the evidence model.

Data we process

We process account identity, workspace membership, billing identifiers, integrations, agent and delegated identities, tool-call metadata, policy decisions, approvals, and audit events you choose to record. We use this information to authenticate users, provide the service, prevent abuse, and support your workspace.

Storage and subprocessors

The service uses the configured authentication, billing, integration, infrastructure, backup, and email providers. Managed OAuth providers hold third-party authorization while Endram stores workspace-scoped connection identifiers.

Retention and deletion

Workspace owners control retention within plan and safety limits and can delete the workspace. Deletion removes application records and retained objects; independently encrypted backups expire under the operational recovery policy.

Operator and contact

the operator identified at checkout operates the service. Privacy, access, correction, and deletion requests may be sent to the privacy contact shown at checkout.