Privacy Policy

1. Introduction

Supyagent ("we", "our", or "us") operates the supyagent.com website and the Supyagent platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

We collect information that you provide directly to us:

• Account information: name, email address, and profile picture when you sign in with Google or GitHub.
• OAuth tokens: access and refresh tokens for third-party services you connect (Google, Slack, GitHub, etc.). These are AES-encrypted at rest.
• Usage data: API call logs, timestamps, and endpoint usage for billing and analytics purposes.
• API keys: HMAC-hashed and stored securely. We never store raw API keys.

3. How We Use Your Information

• To provide, maintain, and improve our services
• To authenticate your identity and manage your account
• To execute API requests on your behalf to connected third-party services
• To process billing and track usage
• To send transactional emails (magic links, account notifications)
• To respond to support requests

4. Data Security

We take the security of your data seriously. OAuth tokens are AES-encrypted at rest. API keys are HMAC-hashed before storage. All data is transmitted over HTTPS. We do not store raw credentials or passwords. Access to production systems is restricted and audited.

5. Third-Party Services

When you connect third-party services (Google, Slack, GitHub, etc.), we access those services on your behalf using the OAuth tokens you authorize. We only request the permissions necessary to provide our service. You can revoke access to any connected service at any time from your dashboard.

6. Data Retention

We retain your account data and OAuth tokens for as long as your account is active. Usage logs are retained for billing purposes. You may request deletion of your account and all associated data by contacting us at hello@supyagent.com.

7. Your Rights

You have the right to access, correct, or delete your personal data. You can disconnect any third-party integration at any time. You can delete your account by contacting us. We will respond to data requests within 30 days.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

9. Contact Us

If you have questions about this Privacy Policy, please contact us at hello@supyagent.com.