Privacy Policy

    Table of contents

    AGENTRUNTIME PRIVACY POLICY

    Effective Date: March 1, 2026 Last Updated: March 1, 2026

    This Privacy Policy ("Policy") describes how AgentRuntime Labs Ltd ("AgentRuntime," "we," "us," or "our") collects, uses, discloses, and safeguards personal information in connection with the AgentRuntime platform and related services (collectively, the "Services"). This Policy applies to all users, visitors, and customers who access or use the Services.

    Please read this Policy carefully. By accessing or using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with the practices described herein, you must discontinue use of the Services.

    This Policy is incorporated by reference into AgentRuntime's Terms of Service.

    1. INFORMATION WE COLLECT

    We collect personal information in the following categories:

    1.1 Account and Registration Information

    When you create an account or register for the Services, we may collect:

    • Full legal name
    • Email address
    • Phone number
    • Date of birth (where required for age verification)
    • Professional title or occupation
    • Physical and mailing address
    • Organization name and role
    • Account credentials (username and hashed password)

    1.2 Usage and Operational Data

    In the course of providing the Services, we automatically collect:

    • API request logs, including request metadata, timestamps, and response codes
    • Workflow execution data, including job identifiers, execution duration, and status
    • System event logs
    • Error reports and diagnostic data
    • Platform performance metrics

    1.3 Technical and Device Information

    We may automatically collect certain technical information, including:

    • IP addresses and approximate geographic location derived therefrom
    • Device identifiers and hardware information
    • Browser type, version, and language preferences
    • Operating system and platform information
    • Referring URLs and navigation data

    1.4 Payment Information

    We use third-party payment processors to handle payment transactions. We do not store full payment card numbers or sensitive financial account data. We may retain limited payment metadata such as billing address, last four digits of a card, payment status, and transaction identifiers as necessary for billing and compliance purposes.

    1.5 Communications Data

    When you contact AgentRuntime for support, submit inquiries, or otherwise communicate with us, we retain records of such communications, including message content, contact details, and timestamps.

    2. HOW WE COLLECT INFORMATION

    We collect personal information through the following means:

    Directly from you — when you register, configure your account, submit content, or contact us.

    Automatically — through the operation of the Services, including server logs, telemetry systems, and cookies or similar tracking technologies.

    From third parties — including identity verification providers, payment processors, and business partners, to the extent permitted by applicable law and such parties' privacy policies.

    3. HOW WE USE PERSONAL INFORMATION

    We use the personal information we collect for the following purposes:

    (a) Service Delivery. To provision, operate, maintain, and deliver the Services, including authenticating users, executing workflows, and processing transactions.

    (b) Account Management. To create and manage your account, verify your identity, and communicate account-related information.

    (c) Billing and Payments. To process payments, manage subscriptions, issue invoices, and administer billing disputes.

    (d) Platform Security and Integrity. To detect, investigate, and prevent fraudulent activity, unauthorized access, abuse, and security incidents.

    (e) Service Improvement. To analyze usage patterns, diagnose technical issues, and enhance the functionality and performance of the Services.

    (f) Legal and Compliance. To comply with applicable laws, regulations, and legal processes, including responding to lawful governmental requests.

    (g) Customer Support. To respond to your inquiries, resolve issues, and provide technical assistance.

    (h) Communications. To send you service-related notifications, administrative messages, security alerts, and, where permitted, product updates or marketing communications. You may opt out of marketing communications at any time.

    We do not use personal information to make fully automated decisions that produce legal or similarly significant effects without human oversight, except as required to enforce our Terms of Service or to prevent fraud.

    Where applicable law requires a legal basis for processing personal data, we process personal information on the following grounds:

    (a) Contract Performance. Processing is necessary to perform the Services you have requested or to take steps prior to entering into a contract.

    (b) Legitimate Interests. Processing is necessary for our legitimate business interests, including platform security, fraud prevention, and service improvement, where such interests are not overridden by your rights.

    (c) Legal Obligation. Processing is necessary to comply with a legal obligation to which we are subject.

    (d) Consent. Where we rely on consent as the legal basis, you have the right to withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

    5. DATA SHARING AND DISCLOSURE

    We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may disclose personal information in the following circumstances:

    (a) Service Providers. We engage trusted third-party vendors and service providers that perform services on our behalf, including cloud infrastructure providers, payment processors, analytics providers, and customer support tools. Such parties are contractually required to process personal data only in accordance with our instructions and to implement appropriate security measures.

    (b) Legal Requirements. We may disclose personal information if we believe in good faith that such disclosure is required by applicable law, regulation, legal process, or governmental request, including lawful requests from public authorities for national security or law enforcement purposes.

    (c) Protection of Rights. We may disclose personal information to protect the rights, property, or safety of AgentRuntime, our users, or the public, to the extent permitted by law.

    (d) Business Transfers. In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or substantially all of our assets, personal information may be transferred to the successor entity, subject to equivalent privacy protections.

    (e) With Your Consent. We may share your personal information with third parties where you have provided your explicit consent.

    6. DATA SECURITY

    AgentRuntime implements and maintains commercially reasonable technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

    • Encryption of data in transit using industry-standard TLS protocols
    • Encryption of sensitive data at rest where appropriate
    • Role-based access controls and least-privilege access policies
    • Infrastructure monitoring and intrusion detection systems
    • Regular security assessments and vulnerability management

    Notwithstanding the foregoing, no security measure is entirely impenetrable. We cannot guarantee the absolute security of personal information transmitted to or stored on our systems. In the event of a security incident affecting your personal data, we will notify you as required by applicable law.

    7. DATA RETENTION

    We retain personal information only for as long as is reasonably necessary to fulfill the purposes for which it was collected, including to comply with legal, regulatory, tax, accounting, or reporting obligations, resolve disputes, and enforce our agreements.

    Upon termination of your account, we will delete or anonymize your personal information within a commercially reasonable time, except where retention is required by applicable law or where we need to retain information to exercise or defend legal claims.

    You may request deletion of your account and associated personal data at any time in accordance with Section 8 below.

    8. YOUR RIGHTS AND CHOICES

    Depending on your jurisdiction, you may have the following rights with respect to your personal information:

    (a) Right of Access. The right to request a copy of the personal information we hold about you.

    (b) Right to Rectification. The right to request correction of inaccurate or incomplete personal information.

    (c) Right to Erasure. The right to request deletion of your personal information, subject to certain legal exceptions.

    (d) Right to Restriction. The right to request that we restrict the processing of your personal information in certain circumstances.

    (e) Right to Data Portability. The right to receive your personal information in a structured, commonly used, and machine-readable format.

    (f) Right to Object. The right to object to the processing of your personal information based on legitimate interests, including for direct marketing purposes.

    (g) Right to Withdraw Consent. Where processing is based on consent, the right to withdraw that consent at any time.

    To exercise any of these rights, please contact us at privacy@agentruntime.io. We will respond to verifiable requests within the timeframe required by applicable law. We may need to verify your identity before processing your request.

    If you are a resident of a jurisdiction with a supervisory authority (such as an EU/EEA data protection authority), you have the right to lodge a complaint if you believe we have processed your personal data unlawfully.

    9. COOKIES AND TRACKING TECHNOLOGIES

    Our website and Services may use cookies, web beacons, pixel tags, and similar technologies ("Cookies") to maintain session state, analyze usage patterns, and improve user experience.

    You may control or disable Cookies through your browser settings. Note that disabling certain Cookies may affect the functionality of the Services.

    For detailed information about the Cookies we use, please refer to our Cookie Policy, available on our website.

    10. CHILDREN'S PRIVACY

    The Services are not directed to individuals under the age of eighteen (18). We do not knowingly collect personal information from minors under eighteen. If we become aware that we have inadvertently collected personal information from a minor without verified parental consent, we will take steps to delete such information promptly. If you believe we have collected information from a minor, please contact us at privacy@agentruntime.io.

    11. INTERNATIONAL DATA TRANSFERS

    AgentRuntime operates globally and may transfer personal information to countries outside your jurisdiction, including countries that may not provide the same level of data protection as your home jurisdiction. Where we transfer personal data internationally, we implement appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission or other legally recognized transfer mechanisms, to ensure that your personal information is protected in accordance with applicable data protection law.

    The Services may contain links to or integrations with third-party websites and services. This Policy does not apply to the privacy practices of such third parties. We encourage you to review the privacy policies of any third-party services you access through the platform.

    13. UPDATES TO THIS POLICY

    We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated Policy on our website and updating the "Last Updated" date. Where required by applicable law, we will provide direct notice. Your continued use of the Services following the effective date of any change constitutes acceptance of the revised Policy.

    14. CONTACT US

    For questions, requests, or concerns regarding this Privacy Policy or our data practices, please contact:

    AgentRuntime Labs Ltd — Privacy Team Email: privacy@agentruntime.io

    © 2026 AgentRuntime Labs Ltd. All rights reserved.