Privacy Policy

AlwaysAgent ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use the AlwaysAgent.app website and cloud workspace services (collectively, the "Services"), as well as the rights you have under applicable laws.

Please read this Policy carefully before using the Services. By using the Services, you acknowledge that you have read and agreed to this Policy. This Policy forms an integral part of our Terms of Service.

1. Data Controller

The data controller of the Services (i.e., the entity that determines how your personal information is processed) is:

2. Information We Collect

2.1 Information You Provide to Us

2.2 Information We Collect Automatically

Note: We collect aggregated resource usage metrics, not your file contents, command history, or terminal output.

3. What We Do Not Collect

• Your code, documents, databases, and file contents—they reside exclusively within the dedicated instance assigned to you;
• Your API keys and proxy credentials—they are stored only inside your own instance; we do not store, forward, or log them;
• Your AI prompts, conversations, and outputs—requests from Claude Code or Codex are sent directly from your instance to your chosen model provider and do not pass through our servers;
• Full payment card numbers and CVV codes—they are processed directly by our payment processor.

We do not access or read the above content for analytics, advertising, or AI model training. Only when you actively request technical support and grant explicit consent, or when required by law to comply with a valid request from a competent authority, will we inspect relevant files to the minimum extent necessary, without retaining any copies once the matter is resolved.

4. How We Use Information

We may aggregate or de-identify data for statistical analysis; such data cannot be used to identify any specific individual.

5. Cookies & Local Storage

The Services use a strictly limited set of cookies and browser local storage (localStorage):

We do not currently use advertising cookies or cross-site tracking pixels. If we introduce third-party analytics tools in the future, we will list the specific tools and provide links to their privacy policies in this Policy.

You may refuse or delete cookies through your browser settings. However, if you disable strictly necessary cookies, you will not be able to log in to or use the Services.

6. Who We Share With

We do not sell your personal information, including as "sale" is defined under applicable laws (such as the CCPA). We share personal information only when necessary under the following circumstances:

All service providers have entered into data processing agreements with us or are bound by equivalent confidentiality obligations, and may process data solely in accordance with our instructions and not for their own independent purposes.

Except as described above, we will not disclose your personal information to any third party without your explicit consent.

7. Data Storage & Security

7.1 Encryption in Transit: All traffic between our website, APIs, and your browser is encrypted via HTTPS / TLS.

7.2 Storage Security: Account passwords are stored using strong cryptographic hashing algorithms and cannot be reversed into plaintext; sensitive credentials are encrypted at rest.

7.3 Access Control: We enforce the principle of least privilege. Only authorized personnel with an operational need may access production data, and all such personnel are bound by strict confidentiality obligations.

7.4 Instance Isolation: Each user's instance runs in an isolated virtualized environment that is invisible and inaccessible to other users.

7.5 Data Breach Notification: In the event of a data security incident that may affect your rights and interests, we will notify affected users via email within 72 hours of confirmation and report the incident to competent authorities as required by law.

7.6 Please keep your account password and the API keys stored inside your instance secure. We are not responsible for any unauthorized access or disclosure resulting from your failure to safeguard your own credentials.

8. Data Retention

Where required by law or necessary to resolve disputes, we may retain specific records beyond the periods stated above, solely for those purposes.

9. Your Data Rights

Subject to applicable law, you have the following rights regarding your personal information. To exercise any of these rights, please email [email protected]. We will process and respond to your request within 30 calendar days.

To protect the security of your account, we may need to verify your identity before fulfilling your request. If you believe we have not adequately addressed your request, you have the right to lodge a complaint with the data protection supervisory authority in your jurisdiction.

10. Marketing Emails & Opt-Out

With your consent, we may send product updates, new feature announcements, and promotional offers to your account email address. You may opt out at any time by:

• Clicking the "Unsubscribe" link at the bottom of any marketing email;
• Disabling marketing notifications in your account settings; or
• Emailing us at [email protected].

Opting out of marketing emails does not affect the delivery of essential service communications—such as billing receipts, renewal reminders, security alerts, and policy update notices—which are necessary to maintain your account.

11. International Transfers

11.1 Our servers, payment processors, and certain service providers may be located outside your country or region of residence (including in the United States, Europe, and the Asia-Pacific region). This means your personal information may be transferred to and processed in jurisdictions outside your home country.

11.2 When transferring personal information across borders, we safeguard your data by:

• Transferring data only to recipients in jurisdictions that provide an adequate level of data protection;
• Entering into data processing agreements with providers that incorporate Standard Contractual Clauses (SCCs) or equivalent legal safeguards; and
• Requiring recipients to maintain strict confidentiality and process data solely in accordance with our instructions.

11.3 Data protection standards may vary across jurisdictions. If the laws of your jurisdiction impose additional requirements on international data transfers, please contact us and we will work to provide appropriate safeguards.

12. Minors

The Services are intended exclusively for users who are at least 18 years of age and are not directed at minors. We do not knowingly collect personal information from anyone under 18. If you become aware that a minor has provided personal information to us, please contact [email protected]. Upon verification, we will promptly delete the relevant data and terminate the associated account.

13. Third-Party Links & Services

The Services may contain links to third-party websites (such as Anthropic, OpenAI, payment processors, and upstream cloud providers) or require you to connect to third-party AI services. This Policy applies solely to information collected directly by us.

Requests you send from your instance to third-party AI services are governed by the respective third parties' own privacy policies. We neither control nor intervene in their data practices, and we encourage you to review their privacy policies before use.

14. Policy Changes

We may update this Policy from time to time. For material changes that expand the scope of data collection, alter the categories of third-party recipients, or restrict your rights, we will notify you via email or in-service notice at least 15 days prior to the effective date and update the "Last Updated" date at the top of this page.

Your continued use of the Services after the effective date of any changes constitutes your acceptance of the revised Policy. If you do not agree to the changes, you may stop using the Services and request account deletion.

15. Contact Us