Privacy policy
What personal data InfraStudio Agents handles, why, and the choices you have.
Who is responsible
[Company name], [registered address] ("we") is the controller for the personal data described here. Contact: contact@infrastudio.io.
What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Early access requests: e-mail, and optionally name, company, team size, tools and your note | To invite you and tailor the onboarding | Your consent, which you can withdraw at any time |
| Account data: name, e-mail, password hash, workspace and role | To provide your account and the service | Contract |
| Billing data: company, billing address, VAT ID, payment status (card details stay with our payment provider) | To charge for plans and keep accounting records | Contract; legal obligation |
| Security records: sign-ins, IP addresses, browser, the audit log | To protect accounts and investigate misuse | Legitimate interests |
| Service e-mails: invitations, notices, digests | To tell you what your agents need from you | Contract; you can turn digests off |
Your workspace content
Code, analytics, error reports, tickets and other content that agents read on your behalf are processed under your instructions. For any personal data in them, your organization is the controller and we are its processor under our data processing agreement. We use this content only to provide the service, and never to train AI models.
Cookies
This website uses one cookie, the session cookie that keeps you signed in. It is strictly necessary and set only when you sign in. We don't use analytics, advertising or tracking cookies.
Who receives data
| Provider | What for | Where |
|---|---|---|
| Amazon Web Services | Hosting, database, encryption keys, e-mail (SES) | United States (Virginia) |
| Stripe | Payments and invoices | EU and USA [transfer safeguards] |
| [Support or e-mail tools, if any] |
Services you connect yourself, such as your AI provider, Git host, analytics and chat tools, receive what your agents send them under your own agreements with those providers.
How long we keep it
- Early access requests: until you join or ask us to delete them, and at most [12 months] after our last e-mail to you.
- Account and workspace data: while your workspace is open, then deleted within [30] days.
- Billing records: as long as accounting law requires.
- Security records: [12 months].
Your rights
You can ask us for a copy of your data, to correct or delete it, to restrict or object to its use, or to receive it in a portable format, and you can withdraw consent at any time. E-mail contact@infrastudio.io. You can also complain to your data protection authority [and ours: name of the authority].
Security
Data is encrypted in transit and at rest, keys you give us are encrypted again on their own, and access is limited and logged. The security page has the details.
Changes
We'll post changes here and e-mail account owners about material ones.
Last updated: [date].