Privacy Policy
Last updated: September 20, 2026
1. Introduction and data controller
This Privacy Policy describes how we collect, use, disclose, and protect your personal data when you use our services. It applies to users in the European Economic Area (EEA), the United Kingdom (UK), and the State of California, and is designed to comply with the General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).
The data controller responsible for your personal data is Dopredu s.r.o. (“we”, “us”, or “our”). If you have questions about this policy or our data practices, please contact us using the details in Section 13.
2. Data we collect
We collect and process the following categories of personal data in connection with our services:
- Account data: When you create an account, we collect your name, email address, a hashed representation of your password, email verification status, and optionally a profile image. We use this to create and manage your account and to authenticate you.
- Session data: When you sign in, we store session identifiers, your IP address, browser or app user agent, and session expiry information. We use this to maintain your session and for security and fraud prevention.
- Connected account data: If you connect an account from another service (for example your email, calendar, file storage, or accounting software from providers such as Google, Microsoft, and others), we store the access tokens, the permissions you granted, the connected account’s email address and profile picture, and connection details. Your agents can also access content in that account when you ask them to. How we use this data is described in Section 3.
- Product usage data: We store the agents you create (including name and task description), agent chats, messages (including content and metadata), and schedules and automations you configure. We use this to provide and improve our service and to fulfill your requests. Messages may contain content your agents retrieved from your connected accounts; that content is handled only as described in Section 3.
- Organization and billing data: We store organization name, plan type, trial period end date, credit balance and purchases, and where applicable Stripe customer ID and payment status. We use this to manage your organization and billing.
- Product analytics data: We collect information about how you use our website and apps, such as pages and screens you view, features you use, device and browser type, and errors you encounter. We use this to understand how our service is used, fix problems, and improve it. This data never includes content from your connected accounts.
- Apps and abuse reports: When a member of an organization opens an app built on our service, we pass the app their name, email address and role in that organization so the app can show who is using it. When anyone reports a public app to us, we store the report, the email address if the reporter chose to give one, and the reporter’s IP address, which we use to limit repeated reports and to investigate abuse. We use reports to review the app and to contact the reporter where they asked us to. When an app calls a connected account through one of its approved actions, we log the run for 90 days: the action, the parameters given, the input sent, the outcome, and either the member who ran it or, for anonymous visitors of a public app, their IP address. We use this log to limit abuse and to let organizations and our staff review what an app did.
- Technical and security data: We may collect and process logs, error reports, and other technical or security-related data necessary to operate, secure, and improve our services.
3. Data from your connected accounts
You can connect accounts you have with other services, such as your email, calendar, file storage, or accounting software from providers like Google, Microsoft, and others. Once connected, your agents can read and act on data in that account, for example emails, files, calendar events, or invoices, but only within the permissions you approve when you connect it. This section explains how we treat that data, and it applies to every account you connect.
What we use it for
We use data from your connected accounts only to provide the features you use in our service, such as running your agents, chats, schedules, and automations, and to improve those features for you. Improving features never involves training AI or machine learning models on this data. For example, when you ask an agent to summarize your unread emails, it reads those emails so it can write the summary. We do not use this data for any other purpose.
How we store it
Access tokens for your connected accounts are stored encrypted in transit and at rest. Content your agents retrieve is saved in your chat history so you can see what they did, and it is kept until you delete the chat, the agent, or your account. When you disconnect an account, we stop accessing it and delete its access tokens.
Who we share it with
We share data from your connected accounts only:
- with the AI model providers that power your agents, only to generate the response or perform the action you requested, and under terms that do not allow them to use your data to train their models (see “AI processing” below);
- with our hosting and infrastructure providers, who store and process it on our behalf to run the service;
- when required by law, or to protect the security of our service and our users.
AI processing
When an agent works on your request, we send the content it needs, such as your message, its instructions, and the results of the tools it used (which can include data from your connected accounts), to an AI model. This happens only at the moment of your request and only to produce the response or perform the action you asked for.
We use the following AI services, all on paid commercial plans whose terms do not allow the provider to use the data we send to train their models:
- OpenAI API (paid API platform, not ChatGPT consumer plans): GPT models for agents, chat titles, and image generation. Data sent through the API is not used for training, and we have not opted in to sharing data with OpenAI. See OpenAI’s enterprise privacy commitments.
- Anthropic API (paid commercial API under Anthropic’s Commercial Terms): Claude models for agents, and files placed in its code-execution environment through the Anthropic Files API. See Anthropic’s Commercial Terms of Service.
- Google Cloud Vertex AI (paid Google Cloud services in our own Google Cloud project): Gemini models, and Vertex AI Agent Engine Memory Bank, which stores agent memories when you enable memory for an agent. See Vertex AI data governance.
We connect to these providers directly through their APIs. No aggregators, gateways, or model marketplaces sit in between, and we do not run self-hosted or offline copies of third-party models.
AI model providers may keep the inputs and outputs we send for a limited period (generally up to 30 days) solely to monitor for abuse and misuse, and then delete them. Files placed in Anthropic’s code-execution environment are stored by Anthropic on our behalf and are not used for training.
What we never do
- We never use it to show you or anyone else advertising, including personalized or retargeted ads.
- We never sell it, or give or sell it to data brokers or other information resellers.
- We never use it to determine creditworthiness or for lending purposes.
- We never use it, whether raw, aggregated, anonymized, or derived, to create, train, or improve foundational or general-purpose AI or machine learning models, and we never transfer it to any third party that would use it for that purpose.
- We never use it for marketing, or send it to analytics tools.
- Our staff do not read it, unless you explicitly ask us to (for example, when you ask for help with a specific message in a support request), it is necessary for security purposes such as investigating abuse, it is necessary to comply with the law, or the data has been aggregated and anonymized for internal operations, which never include training AI models.
Removing access
You can disconnect an account at any time on the Integrations page of your organization. You can also revoke our access in the security settings of the account itself, or ask us to delete your data by contacting us using the details in Section 13.
Provider-specific commitments
Where a provider sets its own rules for how apps may use data from its services, we follow those rules as well. For example, our use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Google Workspace APIs adheres to the Google User Data Policy, including the Limited Use requirements, and the Google Workspace API User Data and Developer Policy. Google Workspace data is never used to develop, improve, or train generalized AI or machine learning models, and is never transferred to AI providers that use it for training.
4. Purposes and legal basis (GDPR)
We process your personal data for the following purposes. Where the GDPR applies, we rely on the following legal bases:
- Providing the service: Performance of our contract with you.
- Authentication and account management: Performance of our contract with you.
- Connected accounts: Performance of our contract with you; your consent, which you give when you connect an account.
- AI processing (e.g. chat and agent tasks): Performance of our contract with you.
- Payments and billing: Performance of our contract with you; compliance with legal obligations where applicable.
- Support and communication: Performance of our contract with you; where applicable, our legitimate interest in communicating with you about the service.
- Product analytics and service improvement: Our legitimate interest in understanding how our service is used and improving it.
- Security, fraud prevention, and system integrity: Our legitimate interest in protecting our systems and users; compliance with legal obligations where applicable.
- Legal and regulatory compliance: Compliance with legal obligations.
Data from your connected accounts is used only as described in Section 3. The other purposes listed here do not apply to it, except security and legal compliance within the limits set out in Section 3.
Where we rely on legitimate interest, we have balanced our interests against your rights and freedoms. You may have the right to object to processing based on legitimate interest (see Section 8).
5. Third parties and subprocessors
We share or allow access to personal data with the following categories of recipients, under appropriate contractual and technical safeguards:
- AI model providers: We send chat messages, agent tasks, and the content your agents work with to the AI model providers that power our features: OpenAI, Anthropic, and Google Cloud Vertex AI, which we access directly through their APIs. They process this data only to generate responses for you and may not use it to train their models. See “AI processing” in Section 3 for details.
- Providers of the accounts you connect: When you connect an account from another service, we exchange data with that provider as needed to perform the actions you ask for. This happens only at your direction.
- Stripe: We use Stripe for payments. Payment-related data may be shared with Stripe as necessary to process your payments.
- Analytics and error tracking: We use PostHog to understand how our website and apps are used and to detect errors. PostHog does not receive content from your connected accounts.
- Hosting and infrastructure: We use third-party providers for hosting, databases, and related infrastructure. These providers process data on our instructions and are bound by data processing agreements where required by law. A list of key subprocessors can be provided on request.
6. International transfers
Your personal data may be transferred to and processed in countries outside the EEA, UK, or your country of residence, including the United States. Where such transfers occur, we ensure appropriate safeguards are in place, such as adequacy decisions, Standard Contractual Clauses (SCCs) approved by the European Commission or UK authorities, or other mechanisms permitted by applicable law. You may request further information about the safeguards we use for international transfers by contacting us at the address in Section 13.
7. Retention
We retain your personal data for as long as your account is active and as needed to provide the service, comply with our legal obligations, resolve disputes, enforce our agreements, and for legitimate backup, security, or audit purposes. Session data is retained for the duration of the session and a short period thereafter. Logs and other technical data may be retained for a limited period as necessary for security and operation. When data is no longer needed for these purposes, we delete or anonymize it in accordance with our retention practices.
8. Your rights
If you are in the EEA or UK (GDPR / UK GDPR), you have the right to:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your personal data in certain circumstances.
- Restriction: Request that we restrict processing in certain circumstances.
- Data portability: Receive your data in a structured, commonly used, machine-readable format and, where feasible, have it transmitted to another controller.
- Object: Object to processing based on legitimate interest or for direct marketing.
- Withdraw consent: Where we rely on consent, withdraw it at any time without affecting the lawfulness of processing before withdrawal.
- Lodge a complaint: Lodge a complaint with a supervisory authority in your country of residence.
If you are a California resident (CCPA/CPRA), you have the right to:
- Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes, and the categories of third parties with whom we share it.
- Delete: Request deletion of your personal information, subject to certain exceptions.
- Correct: Request correction of inaccurate personal information.
- Opt-out of sale and sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. If our practices change, we will update this policy and provide a way to opt out where required.
- Non-discrimination: We will not discriminate against you for exercising your privacy rights.
- Limit use of sensitive personal information: To the extent we use sensitive personal information beyond what is necessary to provide the service, you may have the right to limit our use. We use sensitive personal information only as necessary to provide the service and as described in this policy.
To exercise any of these rights, please contact us using the details in Section 13. We may need to verify your identity before processing your request. For California residents, you may also designate an authorized agent to submit requests on your behalf.
10. Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit and at rest where appropriate, access controls, secure authentication, and regular review of our security practices. No method of transmission or storage is completely secure; we encourage you to use a strong password and to protect your account credentials.
11. Children
Our service is not directed at individuals under the age of 16 (or under 13 in the United States). We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us at the address in Section 13 and we will take steps to delete such information.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the “Last updated” date. For material changes, we may provide additional notice (such as by email or a prominent notice on our service) where appropriate under applicable law. Your continued use of the service after the effective date of the updated policy constitutes acceptance of the revised policy, except where further consent or other steps are required by law.
13. Contact
For any questions about this Privacy Policy, to exercise your privacy rights, or to contact our data protection contact, please reach us at:
Email: privacy@tunori.com
Data controller: Dopredu s.r.o.