This Privacy Policy explains what personal data Angareion, Inc. ("Angareion," "we") collects, how we use it, and who we share it with, when you or your organization ("Customer," "you") use Angareion (the "Service").
1. Data We Collect
We collect:
- Account data — email address, password (hashed), name, and organization details you provide at signup and in account settings.
- Customer Data — the events, memories, documents, and outputs your organization or its AI agents submit to the Service, and metadata about it (timestamps, source, tags, project associations).
- Usage data — API/agent request logs, feature usage, and error reports, used to operate, secure, and improve the Service.
- Payment data — for paid plans, billing details are collected and stored by our payment processor directly; Angareion does not store full card numbers.
2. How We Use Data
We use the data above to:
- Provide the Service — store, index, search, and deliver Customer Data to the agents you authorize;
- Operate account and billing functions (signup, authentication, plan enforcement, invoicing);
- Secure the Service — detect abuse, enforce rate limits and quotas, and investigate incidents;
- Send service email — one-time codes, password resets, and operational notices (not marketing, unless you opt in);
- Improve the Service, using aggregated or de-identified data where feasible.
3. Subprocessors
We share data with the following subprocessors, each engaged solely to provide the Service. The same list, with what each one receives, is kept on our Trust page.
Vendors that process Customer Data, each bound by a data-processing agreement:
- OpenAI, L.L.C. — Creates vector embeddings for search and, on paid plans, extracts structured memories from ingested documents.
- Anthropic, PBC — Powers the guided specialist interviews and other composition features that you or your agents request.
- Amazon Web Services, Inc. — Hosts the Service: compute, block and object storage, container registry and email delivery (Amazon SES). Our databases, search index and queues run on this infrastructure.
- Neo4j Sweden AB — Hosts the managed graph database that stores how memories and outputs relate to each other.
Vendors that handle account, billing, diagnostic or visitor data:
- Stripe, Inc. — Processes payments and subscriptions for paid plans through Stripe-hosted checkout and billing pages.
- Functional Software, Inc. (d/b/a Sentry) — Error monitoring, so we can find and fix crashes.
- Cloudflare, Inc. — DNS and traffic proxying for our public sites, and a bot check (Turnstile) on sign-up.
- Google LLC — Serves the typefaces used by our websites and the app.
- Plausible Insights OÜ — Cookie-free, aggregate analytics for the marketing site and the signup and onboarding pages of the app. (Not used inside the signed-in product. On the app it records only the signup and onboarding pages and the account-created event.)
If you connect your own third-party account to Angareion (for example a Firecrawl key to crawl web pages), the data you direct to it goes to that provider under your own account and terms; it is not an Angareion subprocessor.
We do not sell Customer Data, and we do not use Customer Data to train models on behalf of our subprocessors beyond what is strictly required to provide the features above.
4. Data Retention and Deletion
We retain Customer Data for as long as your account is active, or as needed to provide the Service. When you delete a memory, document, or output, or close your account, we delete or anonymize the corresponding data within a commercially reasonable period, except where retention is required by law or to resolve disputes.
5. Data Security
Customer Data is logically isolated per tenant using database row-level security, and access is authenticated and audited. We use industry-standard safeguards, but no service can guarantee absolute security; see our Terms of Service for the applicable disclaimers.
6. Your Rights
Depending on your location, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. Contact us at privacy@angareion.com to exercise these rights; we will respond within the time required by applicable law.
7. International Transfers
[Placeholder — cross-border transfer mechanism (e.g. SCCs) to be confirmed by counsel based on where Customer Data and subprocessors are located.]
8. Changes to This Policy
We may update this policy from time to time. For material changes we will provide notice before the change takes effect. Continued use of the Service after a change takes effect constitutes acceptance.
9. Contact
Questions about this policy: privacy@angareion.com.