Legal
Privacy Policy
Last updated April 2026
1. What we collect
Account data (name, email, hashed password or Google OAuth identifier), billing data (managed entirely by Stripe — Conduet never sees card numbers), and the projects, workflows, knowledge-base content, and conversation transcripts you create while using the Service.
2. How we use it
To operate the Service: authenticate you, run your agents, serve the dashboard, send transactional email (verification, billing receipts, security alerts), and fix bugs. We do not train models on your content.
3. Third-party processors
We use Supabase (authentication + Postgres, hosted in Sydney ap-southeast-2), Vercel (web hosting), Fly.io (API hosting, Sydney region), Stripe (billing), and — when you run your agents — the LLM providers whose keys you configure (OpenAI, Anthropic). BYOK traffic goes directly from our API to your provider; we log only the usage metadata needed for the dashboard.
4. Data retention
Conversation transcripts are retained while your account is active. Deleting a project deletes its transcripts, knowledge-base content, and API keys. Deleting your account purges all associated data within 30 days.
5. Your rights
You can access, export, or delete your data at any time from the account settings page or by emailing privacy@conduet.ai. Australian residents have rights under the Privacy Act 1988 (Cth); we handle requests within 30 days.
6. Cookies
We use a single httpOnly session cookie for authentication. We do not run advertising trackers or third-party analytics pixels on the app.
7. Contact
Privacy questions: privacy@conduet.ai.