Privacy Policy

1. Information We Collect

When you create an account on Delegir, we collect your name, email address, business name, and business type. When you use our AI agents, we process the content you provide (messages, documents, and instructions) to generate responses and complete tasks on your behalf.

2. How We Use Your Data

We use your information to provide and improve the Delegir platform, including running AI agents, generating responses, tracking usage, and communicating with you about your account. We do not sell your personal information to third parties.

3. AI Processing

Delegir uses artificial intelligence models to power agent capabilities. Content you provide to your agents is processed by our AI systems to generate responses. We do not use your business data to train AI models. Agent outputs are stored in your account for your records and audit purposes.

4. Data Storage & Security

Your data is stored securely using industry-standard encryption. We implement appropriate technical and organizational measures to protect against unauthorized access, alteration, disclosure, or destruction of your data. API keys are stored as cryptographic hashes — we never store your full API keys in plaintext.

5. Cookies

We use essential cookies to maintain your session and preferences. We do not use tracking cookies or third-party advertising cookies. Authentication is handled by our identity provider (Clerk) which sets its own necessary session cookies.

6. Third-Party Services

Delegir integrates with third-party services to provide its functionality, including authentication providers, AI model providers, and payment processors. Each of these services has their own privacy policies. We only share the minimum data necessary for these services to function.

7. Data Retention

We retain your data for as long as your account is active. You can request data export or account deletion at any time through your account settings or by contacting us. Agent run history is retained according to your configured data retention period (default: 90 days).

8. Data Subject Rights

Under applicable data protection laws (including GDPR), you have the following rights regarding your personal data:

• Right to Access — Request a copy of the personal data we hold about you.
• Right to Rectification — Request correction of inaccurate or incomplete data.
• Right to Erasure — Request deletion of your personal data ("right to be forgotten").
• Right to Restrict Processing — Request limitation of how we use your data.
• Right to Data Portability — Receive your data in a structured, machine-readable format.
• Right to Object — Object to processing based on legitimate interests or for direct marketing.

You can manage most of these actions directly from your Delegir dashboard settings, or by contacting us at support@delegir.com. We will respond to all data subject requests within 30 days.

9. Lawful Basis for Processing

We process your personal data under the following lawful bases: Consent for marketing communications and optional analytics; Contractual necessity for providing the Delegir service, processing payments, and fulfilling your subscription; Legitimate interest for platform security, fraud prevention, and aggregated usage analytics that improve the service.

10. International Data Transfers

Delegir processes and stores data in the United States. If you are located outside the US (including in the European Economic Area), your data will be transferred to and processed in the US. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection for international data transfers. Our sub-processors maintain appropriate safeguards in compliance with applicable data protection regulations.

11. Data Retention

We retain your account data for as long as your account is active. Agent run history is retained according to your configured data retention period (default: 90 days). Upon account closure, all personal data is deleted within 30 days, except where retention is required by law (such as billing records retained for tax compliance). You can request data export or account deletion at any time through your account settings or by contacting us.

12. Breach Notification

In the event of a confirmed personal data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users within 72 hours of becoming aware of the breach. Notification will be sent via email to the address associated with your account, and will include details about the nature of the breach, the data affected, and the steps we are taking to address it.

13. Data Protection Officer

For questions or concerns about our data protection practices, or to exercise your data subject rights, you can contact our Data Protection Officer at privacy@delegir.com.

14. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by email or through a notice on our website. Your continued use of Delegir after changes constitutes acceptance of the updated policy.

15. Contact

If you have questions about this privacy policy or our data practices, contact us at support@delegir.com.