Privacy Policy

This policy explains what information Asgard collects, how we use it, and the choices you have. By using the Service you agree to this policy.

1. Information we collect

Information you provide

• Account data — your name (optional), email address, and password (stored only as a secure hash).
• Content & configuration — the goals, agents, workflows, prompts, and other data you create.
• Integration credentials — tokens for third-party services you connect, stored encrypted at rest.

Information collected automatically

• Usage & operational data — logs, audit records, token/cost metrics, and timestamps used to run and secure the Service.
• Device/connection data — IP address and basic request metadata, used for security and reliability.

2. How we use information

• to provide, operate, secure, and improve the Service;
• to run the agents and workflows you create, including connecting to providers you authorize;
• to enforce usage limits and budgets and to detect abuse;
• to communicate with you about your account and important changes;
• to comply with legal obligations.

3. AI & model providers

When an agent runs, the prompts and context you provide may be sent to the AI model provider you have connected (for example, via a provider account or API key). That provider processes the data under its own terms and privacy policy. We do not sell your data or your prompts.

4. Third-party integrations

If you connect a third-party service, we exchange data with it as needed to perform the actions you request. The third party's handling of your data is governed by its own policies. You can disconnect an integration at any time.

5. How information is shared

We do not sell your personal information. We share information only:

• with model providers and integrations you connect, to perform requested actions;
• with infrastructure and hosting providers that operate the Service on our behalf;
• where required by law, or to protect the rights, safety, and security of the Service and its users;
• in connection with a business transfer, subject to this policy.

6. Security

We use technical and organizational measures to protect your data, including encryption of stored secrets, access controls, audit logging, and rate limiting. No system is perfectly secure, and we cannot guarantee absolute security.

7. Data retention

We retain your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account and associated data as described below.

8. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at the address below. We will respond consistent with applicable law.

9. International transfers

Your information may be processed in countries other than where you live. Where required, we take steps to ensure appropriate safeguards for such transfers.

10. Children

The Service is not directed to individuals under 18, and we do not knowingly collect their data.

11. Changes

We may update this policy from time to time. We will reflect changes by updating the "Last updated" date above and, where appropriate, provide additional notice.

12. Contact

For privacy questions or requests, contact [email protected]. See also our Cookie Policy.