This Privacy Policy explains what Sproutsy (“Sproutsy,” “we,” “us”) collects, how we use it, and the choices you have. It applies to the Sproutsy website, dashboard, and hosted agents (the “Service”) and should be read with our Terms of Service.
1. What we collect
Information you provide
- Account. Email address and a hashed password. We never store your password in plain text.
- Billing. When you add credit, payments are processed by our payment processor. We receive billing metadata (amount, timestamp, status, and a card reference token) but do not store your full card number.
- Your Content. Prompts, files, agent memory, connected-channel messages, and any credentials or secrets you choose to give your agent so it can act on your behalf.
Information collected automatically
- Usage and billing telemetry. Token counts, request metadata, and resource usage, used to meter your balance and operate the Service.
- Technical logs. IP address, timestamps, and request/error logs, used for security, abuse prevention, and debugging.
- Cookies. A session cookie to keep you signed in and routing cookies to direct you to your agent. We do not use third-party advertising cookies.
2. How we use your data
- to provide, operate, secure, and improve the Service;
- to run your agent and route its requests to the LLM and tools it needs;
- to meter usage, bill credit, and prevent fraud and abuse;
- to communicate with you about your account, billing, and service changes;
- to comply with law and enforce our Terms.
We do not sell your personal data, and we do not use Your Content to train our own models.
3. Sub-processors and sharing
We share data with a small set of service providers only as needed to run the Service:
- LLM providers. Your agent’s prompts and context are sent to the model provider(s) powering it in order to generate responses. Their handling of that data is governed by their own terms and privacy policies.
- Hosting & network. Our cloud infrastructure provider hosts the Service, and our edge/CDN provider terminates TLS and protects against abuse.
- Payments. Our payment processor handles card data and charges.
- Connected channels & tools. When you connect a third-party channel or tool, data flows to and from that service at your direction.
We may also disclose data if required by law, to protect the rights, safety, and security of Sproutsy and our users, or as part of a merger or acquisition (with notice).
4. Storage, location, and isolation
Each agent runs in its own isolated container, and your agent’s files and memory are stored on a per-tenant basis. Account and billing records live in a separate control database. The Service is currently hosted in the United States. If you access it from elsewhere, your data is transferred to and processed in the United States.
5. Security
We use encryption in transit (TLS), at-rest encryption for sensitive secrets, network isolation between tenants, access controls, and rate limiting. Account credentials are hashed. No system is perfectly secure, but we take measures appropriate to the sensitivity of the data we hold. We keep regular encrypted backups of account and billing data for disaster recovery.
6. Retention
We keep your data for as long as your account is active. When you delete your account, we tear down your agent and its resources and delete or anonymize associated personal data, except where we must retain limited records (for example billing/tax records or to comply with law, resolve disputes, or enforce agreements). Backups age out on a rolling schedule.
7. Your rights and choices
- Access & deletion. You can view and edit your agent’s data in the dashboard, and delete your account at any time, which removes your agent and frees your email for re-registration.
- Regional rights. Depending on where you live (for example the EEA, UK, or California), you may have rights to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing. To exercise these, contact us at the address below.
- Communications. We send essential account and billing notices; these are not optional while you have an account.
8. Children
The Service is not directed to children under 18, and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.
9. Changes to this policy
We may update this Policy. We will update the date above and, for material changes, notify you in the dashboard or by email. Continued use after changes take effect constitutes acceptance.
10. Contact
Questions or requests about your privacy? Email support@sproutsy.ai.