Privacy Policy

Promenaut AI Ltd ("Promenaut", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at promenaut.ai and use our AI agent orchestration platform (collectively, the "Service").

By accessing or using the Service, you agree to the collection, use, and disclosure of personal information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2.1 Personal Information You Provide

We collect personal information you provide directly to us when you use or access the Service, including:

• Account information - such as name, email address, company name, and job title when you register or request a demo
• Authentication data - such as credentials from OAuth providers (Google, GitHub, LinkedIn) if you choose to sign in via third-party services
• Platform data - such as workflow configurations, settings, agent definitions, documents and other content that you chose to input into the Service and any generated outputs created through the Service
• Communications - such as any messages, feedback, or support requests you send to us
• Payment and subscription information, such as bank account, credit or debit card information and billing address, which is collected on our behalf by our payment processor, and information about your subscription tier and transaction history

2.2 Personal Information Collected Automatically

When you access the Service, we automatically collect certain personal information using cookies and other tracking technologies:

• Usage data - pages visited, features used, actions taken, and time spent on the Service
• Device information - browser type, operating system, device identifiers, and screen resolution
• Log data - IP address, access times, referring URLs, and error logs
• Analytics - we use Plausible Analytics, a privacy-focused analytics tool that does not use cookies and does not collect personal information

Most browsers accept cookies automatically, but you may be able to control the way in which your devices permit the use of cookies. If you so choose, you may block or delete certain of our cookies from your browser; however, blocking or deleting cookies may cause some of the Service, including any portal features and general functionality, to work incorrectly. Your browser settings may also allow you to transmit a signal or other mechanism for exercising your choice regarding the collection or processing of your personal information when you visit various websites. Our website is not currently designed to respond to such signals.

For further information on the use of cookies and tracking technologies and your choices, see our cookies policy.

2.3 Personal Information Collected From Other Sources

We may obtain personal information about you from outside sources, including personal information that we collect directly from third parties and personal information from third parties that you choose to share with us. This includes personal information we receive from OAuth providers (such as Google, GitHub and LinkedIn). Any personal information we receive from outside sources will be treated in accordance with this Privacy Policy. We are not responsible for the accuracy of the personal information provided to us by third parties and are not responsible for any third party's policies or practices. For more information, see the section below, Third-Party Websites and Links.

2.4 AI-Processed Data

When you use our AI agent orchestration features, your inputs (including documents, code, and configuration data) are processed by large language model providers (such as Anthropic, OpenAI, and Google) to generate outputs.

2.5 Deidentified and Anonymised Information

We may deidentify or anonymise your personal information such that it cannot reasonably be used to infer information about you or otherwise be linked to you ("deidentified information") (or we may collect information that has already been deidentified/anonymised), and we may use deidentified information for any purpose. To the extent we possess or process any deidentified information, we will maintain and use such information in deidentified form and not attempt to re-identify the information, except for the purpose of determining whether our deidentification process satisfies legal requirements.

We use the personal information we collect for the following purposes and, where required, on the following legal bases:

• Service delivery - to provide, operate, and maintain the Service and its features, as necessary to perform contracts with you for the Service
• Account management - to create and manage your account, authenticate your identity, and process transactions, as necessary to perform contracts with you for the Service
• Communication - to send you technical notices, security alerts, support messages, and service updates, as necessary to perform contracts with you for the Service
• Improvement - to analyse usage patterns, diagnose technical issues, and improve the Service and our platforms, AI systems and models, in our legitimate interests to operate a successful business
• Security - to detect, prevent, and address fraud, abuse, and security incidents and otherwise enhance the safety and security of the Service, in our legitimate interests to operate a successful business, and to comply with applicable laws and regulations
• Compliance - to comply with legal obligations, deal with legal requests, and enforce our terms of service and other agreements and rights, as required by law or in our legitimate interests to comply with law and protect our legal interests
• Protection of Rights - to protect our rights and the rights of our employees, users or other individuals, in our legitimate interests to operate a successful business
• Marketing - to provide you with marketing, with your consent where required under applicable law, or otherwise in our legitimate interests to run a successful business
• Deidentification and Anonymisation - as set out further above, in our legitimate interests to run a successful business

We do not use your personal information for advertising purposes.

We do not sell, trade, or rent your personal information. We may share your personal information in the following circumstances:

• Service providers - with third-party vendors or other service providers who assist in operating the Service (including for hosting, analytics, and email delivery), as a matter of our legitimate interests to efficiently provide the Services
• Affiliates - with our affiliates or others within our corporate group, as a matter of our legitimate interests to efficiently provide the Services
• AI model providers - with LLM providers (including Anthropic, OpenAI, and Google) for the purpose of processing your platform requests, subject to their data processing terms, in order to perform our contract to provide the Services
• Business transfers - third parties in connection with or anticipation of a merger, acquisition, sale of assets, or other business transaction including in the context of a bankruptcy proceeding or other restructuring matter, as a matter of our legitimate interests to run a successful and efficient business
• Professional advisors - such as auditors, law firms, or accounting firms as a matter of our legitimate interests to assess, protect, enforce and defend our rights and to comply with our legal and regulatory obligations
• Compliance - to comply with applicable law or any obligations thereunder or to cooperate with law enforcement, judicial orders, and regulatory inquiries and to enforce any terms of service or other agreements as a matter of our legitimate interests to assess, protect, enforce and defend our rights and to comply with our legal and regulatory obligations
• Protection of rights - to protect the rights, property, or safety of Promenaut, our employees, our users, or the public, including for security reasons and to detect and prevent against fraudulent or illegal activity, as a matter of our legitimate interests to run a successful business

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected. In general, subject to applicable laws and regulations, we retain your personal information for the following periods:

• Account information, authentication data - retained for the duration of your account and up to 30 days after deletion
• Platform data - workflow outputs and data are retained until you delete them or close your account
• Usage data, device information, log data, analytics - aggregated and anonymised data, to the extent not considered personal information under applicable privacy laws, may be retained indefinitely for statistical purposes
• Communications - retained for up to 2 years after resolution

While we strive to protect your personal information, no security measures are impenetrable and no method of transmission over the Internet or electronic storage is 100% secure. Any personal information you send to us electronically, while using the Service or otherwise interacting with us, may not be secure while in transit. We recommend that you do not use unsecure channels to send us sensitive or confidential information. We cannot guarantee absolute security.

Depending on where you live and applicable data protection laws, you may have the following rights in relation to your personal information:

• Access - request a copy of the personal information we hold about you
• Rectification - request correction of inaccurate or incomplete personal information
• Erasure - request deletion of your personal information ("right to be forgotten")
• Restriction - request restriction of processing in certain circumstances
• Portability - receive your personal information in a structured, machine-readable format
• Objection - object to processing based on legitimate interests
• Withdraw consent - withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at privacy@promenaut.ai. Please note that a number of these rights only apply in certain circumstances, and all of these rights may be limited by law.

You also have the right to lodge a complaint directly with us, as well as with the Information Commissioner's Office (ICO) at ico.org.uk.

Your personal information will be transferred to and processed in countries outside the United Kingdom, including the United States (where our cloud infrastructure is hosted). Where we transfer personal information outside of the United Kingdom, we ensure appropriate safeguards are in place, including the Addendum to the Standard Contractual Clauses (SCCs) (specifically, module one (controller to controller transfer) and module two (controller to processor transfer), as relevant) approved by the UK Information Commissioner. You may ask to see a copy of these safeguards by contacting us at privacy@promenaut.ai.

We may provide links to third-party websites or platforms. If you follow links to sites or platforms that we do not control and are not affiliated with us, you should review the applicable privacy notice, policies and other terms. We are not responsible for the privacy or security of, or information found on, these sites or platforms. Information you provide on public or semi-public venues, such as third-party social networking platforms, may also be viewable by other users of the Service and/or users of those third-party platforms without limitation as to its use. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators.

The Service is not directed to individuals under the age of 18. We do not seek or knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that personal information promptly.

We may update this Privacy Policy from time to time. We will use reasonable efforts to notify you of any material changes by posting the new policy on this page and updating the "Last updated" date and if required by applicable law, email you at the last email address you provided, post notice of such changes on the Service, or by other means consistent with applicable law. We encourage you to review this Privacy Policy periodically. If you do not agree to any updates to this Privacy Policy, please do not continue using or accessing the Service.

If you have any questions about this Privacy Policy or our data practices, please contact us:

Promenaut AI Ltd
Data Protection Enquiries
Email: privacy@promenaut.ai