Privacy policy

• Account data: your name, email address and profile image from Google when you sign in. We never see your Google password.
• Agent designs: the prompts, policies, models, and canvas layouts you create.
• Run logs: the inputs sent to your agents, the outputs, and the trace of each stage, so you can debug and audit behaviour.
• Billing data: your plan, subscription status, and Polar customer id. Card details are handled by Polar and never reach our servers.
• Technical data: IP address, browser, and timestamps in server logs, used for security and reliability.

• To run the Service: authenticate you, store your designs, execute agents, show traces.
• To bill you and enforce plan limits.
• To send transactional email, such as when your trial ends or your plan changes. We do not send marketing email without consent.
• To keep the platform secure and prevent abuse.

We do not sell your data and we do not use your prompts, inputs, or outputs to train models.

We rely on these providers, each bound by their own privacy terms:

• Vercel hosts the application and serves deployed endpoints.
• Neon stores our database (accounts, designs, logs, billing state).
• Groq runs the language models that power agents and guardrails. Your inputs and prompts are sent to Groq to generate responses.
• Google provides sign-in.
• Polar processes payments and subscriptions.
• Resend delivers transactional email.

Account and design data are kept while your account exists. Run logs are kept so you can review traces; deleting an agent deletes its designs, deployments, and logs. If you want your whole account removed, email us and we will delete it within 30 days, except for records we must keep for tax or legal reasons.

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, or to object to certain processing. Email us and we will respond within 30 days. You can also manage your subscription and invoices from the customer portal on the billing page.

We use a session cookie to keep you signed in and a local preference for your theme. We do not use advertising or cross-site tracking cookies.

Data is encrypted in transit. API keys are unique per agent and can be rotated at any time. Access to production systems is limited to the operator. No system is perfectly secure; if we learn of a breach affecting your data, we will notify you without undue delay.

The Service is not directed at children under 18 and we do not knowingly collect their data.

We may update this policy and will show the new date at the top. For material changes we will notify you by email or in the app.

Privacy questions or requests: support@nishy.space. See also our terms of service.