Privacy Policy

1. Introduction

Super Agent Stack ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI API service.

By using Super Agent Stack, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Name and email address
• Password (encrypted)
• Phone number (optional)
• Company name (optional)

2.2 Usage Data

We automatically collect information about your use of the Service:

• API requests and responses
• Token usage and consumption
• Request timestamps and frequency
• IP addresses and device information
• Browser type and version
• Error logs and debugging information

2.3 Payment Information

Payment processing is handled by Razorpay. We store:

• Subscription plan and status
• Billing history
• Payment method type (not full card details)

We do not store complete credit card information. All payment data is securely processed by Razorpay in compliance with PCI-DSS standards.

2.4 API Content

We may temporarily store:

• API request prompts and parameters
• Generated responses
• RAG system documents and embeddings

This data is used solely for service delivery, debugging, and improvement purposes.

3. How We Use Your Information

We use the collected information to:

• Provide and maintain the Service
• Process your transactions and manage subscriptions
• Monitor usage and enforce rate limits
• Improve and optimize the Service
• Provide customer support
• Send service-related notifications
• Detect and prevent fraud or abuse
• Comply with legal obligations
• Generate anonymized analytics and insights

4. Data Retention

We retain your information for as long as necessary to provide the Service and comply with legal obligations:

• Account data: Retained while your account is active
• API logs: Retained for 90 days
• Billing records: Retained for 7 years for tax purposes
• RAG documents: Retained until you delete them

You can request deletion of your data at any time by contacting support.

5. Data Sharing and Disclosure

5.1 Third-Party Services

We share data with trusted third-party services:

• OpenRouter: For AI model access and processing
• Razorpay: For payment processing
• Clerk: For authentication services
• Cloud hosting providers: For infrastructure

5.2 Legal Requirements

We may disclose your information if required to:

• Comply with legal obligations or court orders
• Protect our rights and property
• Prevent fraud or security threats
• Protect user safety

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity.

6. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (TLS/SSL)
• Encryption at rest for sensitive data
• Secure API key management with hashing
• Regular security audits and updates
• Access controls and authentication
• Monitoring and logging of security events

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

7. Your Rights and Choices

You have the following rights regarding your data:

• Access: Request a copy of your data
• Correction: Update inaccurate information
• Deletion: Request deletion of your data
• Export: Download your data in a portable format
• Opt-out: Unsubscribe from marketing emails
• Restriction: Limit how we process your data

To exercise these rights, contact us at privacy@superagentstack.com

8. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your session and authentication
• Remember your preferences
• Analyze usage patterns
• Improve user experience

You can control cookies through your browser settings. Disabling cookies may affect Service functionality.

9. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

11. AI Model Training

We do not use your API requests or generated content to train AI models unless you explicitly opt-in to a data contribution program.

Third-party AI providers (like OpenRouter) have their own data policies. We recommend reviewing their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification (for significant changes)

Continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

14. GDPR Compliance (EU Users)

If you are in the European Union, you have additional rights under GDPR:

• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

Our legal basis for processing your data includes:

• Contract performance (providing the Service)
• Legitimate interests (improving the Service)
• Legal obligations (compliance)
• Consent (where applicable)

15. California Privacy Rights (CCPA)

California residents have additional rights under CCPA:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to deletion
• Right to non-discrimination

We do not sell your personal information.