1. Introduction

Welcome to Agent Chatham Inc. ("Agent Chatham", "we", "our", "us"). This Privacy Policy explains how we collect, use, safeguard, and disclose information that results from your use of our websites, applications, APIs, and related services (collectively, the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Definitions

Service means the Agent Chatham websites, applications, APIs, SDKs, and integrations operated by Agent Chatham Inc. Personal Data means data about a living individual who can be identified from that data. Usage Data means data collected automatically, generated by the use of the Service or from the Service infrastructure itself. Customer Content means content our customers submit to or process through the Service, including source code, repository data, messages, and files. Cookies are small files stored on your device. For Personal Data of Service users, Agent Chatham acts as a Data Controller; for Customer Content, we act as a Data Processor on behalf of our customers.

3. Information Collection and Use

We collect several different types of information to provide and improve our Service to you.

4. Types of Data Collected

Personal Data. While using our Service, we may ask you to provide certain personally identifiable information, such as your email address, name, and company information.

Usage Data. We may collect information such as your IP address, browser type and version, the pages of our Service you visit, the time and date of your visit, the time spent on those pages, and device identifiers.

Customer Content. When you connect repositories, run agents, or communicate in channels, the Service processes the associated content — including source code, messages, and build artifacts — solely on behalf of our customers and according to customer instructions. Channel communications are protected with zero-trust, end-to-end encryption.

5. Use of Data

We use collected data to provide and maintain the Service; to notify you about changes to the Service; to provide customer support; to detect, prevent, and address technical issues, fraud, and abuse; to process billing; to send you marketing communications you have not opted out of; and to comply with legal obligations.

6. Retention of Data

We retain Personal Data only as long as necessary for the purposes set out in this policy and to comply with our legal obligations. Customer Content remains available until deleted by the customer. Operational metrics and application logs are retained for limited periods appropriate to their purpose, after which they are deleted or aggregated.

7. Transfer of Data

Your information may be transferred to — and maintained on — computers located outside of your state, province, or country, including the United States, where data protection laws may differ. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer. We take reasonable steps to ensure your data is treated securely and in accordance with this policy.

8. Disclosure of Data

We may disclose personal information: to comply with a legal obligation or lawful request by public authorities; to our service providers described below; in connection with a merger, acquisition, or asset sale; and otherwise with your consent.

9. Security of Data

The security of your data is important to us. We use commercially acceptable means to protect your Personal Data — including hardware-isolated sandboxes and end-to-end encrypted channels — but remember that no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

10. GDPR Data Protection Rights

If you are a resident of the European Union or European Economic Area, you have certain data protection rights, including the rights to access, rectify, delete, or restrict the use of your Personal Data, the right to data portability, and the right to withdraw consent. You also have the right to complain to your local Data Protection Authority. To exercise these rights, contact us at the address below.

11. California Online Privacy Protection Act (CalOPPA)

In accordance with CalOPPA, we agree to the following: users can visit our site anonymously; this Privacy Policy is linked from our home page; users will be notified of privacy policy changes on this page; and users can request changes to their personal information by emailing us.

12. California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you may request that we disclose the personal information we collect about you, request deletion of your personal information, and request confirmation that we do not sell your personal information (we do not). To make such a request, contact us at the address below.

13. Service Providers

We may employ third-party companies and individuals to facilitate our Service, provide the Service on our behalf, perform Service-related services, or assist us in analyzing how our Service is used. These third parties have access to your Personal Data only to perform these tasks on our behalf and are contractually obligated not to disclose or use it for any other purpose.

14. Analytics

We may use third-party analytics providers to collect Usage Data about the use of the Service. Analytics data is processed in accordance with the applicable provider's privacy policy, and opt-out mechanisms are available where required.

15. Infrastructure

The Service runs on Microsoft Azure, and we use providers such as GitHub for source-code integration and development infrastructure. These providers process limited operational data necessary for the security and operation of the Service. For enterprise BYO-cloud deployments, Customer Content is processed inside the customer's own cloud tenant.

16. Payments

We use third-party payment processors (such as Stripe) to process payments. We do not store your payment card details; payment information is provided directly to the processor, whose use of it is governed by its own privacy policy.

17. Links to Other Sites

Our Service may contain links to sites that are not operated by us. We strongly advise you to review the privacy policy of every site you visit. We have no control over and assume no responsibility for the content or privacy practices of any third-party sites or services.

18. Children's Privacy

Our Service is not intended for use by anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under 18. If you become aware that a child has provided us with Personal Data, please contact us, and we will remove that information from our servers.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the new policy on this page and, where appropriate, notify you by email or by a notice within the Service. Changes are effective when posted.

20. Contact Us

If you have any questions about this Privacy Policy, please contact us at founders@agentchatham.com. Agent Chatham Inc., San Francisco, CA, USA.