Privacy Policy

1. Information We Collect

We collect the following information when you use AI Agent Army:

• Account data: email address, name, authentication provider, plan, task quota, founder number (if applicable)
• Usage data: tasks submitted, agent interactions, session history, conversation turns, uploaded knowledge-base documents
• Technical data: IP address, device fingerprint, browser type, request timestamps
• Payment data: Gumroad sale ID, plan tier, subscription status (we never see or store card numbers — those live with Gumroad)

2. How We Use Your Information

• To provide and improve the AI orchestration service
• To authenticate your account and prevent abuse
• To process payments and manage credits
• To send transactional emails (onboarding, account notifications)
• To enforce our Terms of Service and rate limits

3. Army Memory

The platform includes an "Army Memory" feature that stores context from your interactions to improve future responses. Three categories are persisted:

• Session conversations — user messages and agent responses, grouped by session ID, used to give continuity across turns.
• Cross-session learning — aggregated scores per task type (success signals) used to prioritize approaches that have worked for you before.
• Knowledge base documents — files you upload (PDF, DOCX, TXT) are chunked and stored so agents can reference them in later tasks.

This data is scoped to your tenant and accessible only through your account. You can view and delete sessions from the War Room sidebar at any time. We do not use your personal memory data to train AI models.

4. Data Storage, Retention and Security

Your data is stored on secure servers in the EU (Google Cloud Platform, europe-west4). We implement industry-standard security measures including encrypted connections (HTTPS), httpOnly authentication cookies, access controls, and regular backups.

Retention periods:

• Account data — retained for the lifetime of your account.
• Session conversations — retained indefinitely unless you delete them from the War Room.
• Async task outputs — retained 90 days, then purged.
• Payment records — retained 7 years for accounting compliance (EU law).
• After account deletion — all personal data is purged within 30 days, except anonymized usage metrics and records required by law.

5. Third-Party Services

We use the following third-party services:

• Google OAuth: for authentication (subject to Google's Privacy Policy)
• Resend: for transactional email delivery
• LemonSqueezy / Gumroad: for payment processing
• AI providers (Groq, Cerebras, OpenRouter, Pollinations): for processing your tasks
• Cloudflare: for DDoS protection and CDN

Task content submitted to our AI agents may be processed by these providers. We recommend not submitting sensitive personal data in task prompts.

6. Your Rights (GDPR)

If you are in the EU, you have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict processing of your data
• Request a portable copy of your data
• Withdraw consent at any time

To exercise these rights, contact us at [email protected].

7. Cookies

We use minimal cookies strictly necessary for authentication and session management. We do not use tracking or advertising cookies. The language preference is stored in localStorage.

8. Children's Privacy

The Service is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe we have collected such data, contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or a notice on the platform. Continued use of the Service constitutes acceptance of the updated policy.

10. Contact

For privacy questions or data requests, contact us at [email protected].