Privacy Policy

Data Controller

The data controller for AgentBuilders.app is Vonkra Ltd. For questions about data processing or to exercise your rights, contact us at privacy@agentbuilders.app.

Information We Collect

We collect information you provide directly and information generated through your use of the Service:

• Account information: email address, display name, and authentication credentials when you register.
• Application data: source code, files, database records, and configuration you deploy to the platform.
• Usage data: deploy frequency, API call patterns, resource consumption, and feature usage.
• Device and access data: IP address, browser type, operating system, and referral URLs collected automatically on each request.
• Payment information: billing details processed securely by Stripe. We do not store full credit card numbers on our servers.

Legal Basis for Processing (GDPR Article 6)

We process your personal data under the following legal bases:

• Contract performance: processing necessary to provide the Service you signed up for (account management, deployments, billing).
• Legitimate interests: protecting the platform against abuse and fraud (rate limiting, IP-based threat detection), maintaining service reliability (error tracking, performance monitoring), and improving the platform based on aggregated usage patterns.
• Consent: optional marketing communications (you can withdraw consent at any time).
• Legal obligation: compliance with applicable laws, tax requirements, and legal requests.

How We Use Information

• To operate, maintain, and improve the AgentBuilders platform.
• To process deployments and serve your applications to end users.
• To enforce tier limits, rate limits, and acceptable use policies.
• To detect and prevent abuse, fraud, and security threats.
• To communicate with you about your account, billing, and service updates.
• To generate aggregated, anonymized analytics to improve the Service.

Data Storage and Infrastructure

AgentBuilders runs on Cloudflare's global edge network. Your data is processed and stored using the following infrastructure:

• Cloudflare D1: application metadata and structured data storage.
• Cloudflare R2: file and asset storage for deployed applications.
• Cloudflare Analytics Engine: anonymized usage analytics and performance metrics.
• Cloudflare Workers: serverless compute for request handling at the edge.

Data is replicated across Cloudflare's network for performance and reliability. Some of our processors are located outside the European Economic Area (EEA). International transfers are protected by appropriate safeguards:

• Cloudflare: Data Processing Addendum with Standard Contractual Clauses (SCCs).
• Stripe: EU-US Data Privacy Framework certified; SCCs in place.
• Sentry: SCCs and data processing agreement.
• Resend: Data processing agreement with SCCs.

Cookies and Tracking

AgentBuilders uses the following cookies:

• ab_consent (365 days): Stores your cookie consent preference (accepted or rejected). Essential for GDPR compliance.
• Session cookies: Authentication tokens for logged-in users. Essential for platform operation.

When you accept analytics cookies, we use Cloudflare Analytics Engine to collect request-level data (request path, response status, timing) for service reliability. We also track CTA interactions on the landing page to improve the user experience. You can withdraw consent at any time using the "Cookie Settings" link in the footer. We do not use third-party advertising trackers or cross-site tracking cookies.

Third-Party Services

We share information with the following third-party services as necessary to operate the platform:

• Stripe: payment processing and subscription management. Stripe's privacy policy governs their handling of your payment data.
• Cloudflare: infrastructure, CDN, DNS, and analytics services. Cloudflare's privacy policy applies to data processed through their network.
• Sentry: error tracking and performance monitoring. Sentry receives sanitized error data (no PII, IP addresses, or authentication tokens). Sentry's privacy policy governs their data handling.
• Resend: transactional email delivery (account verification, password resets, billing notifications). Resend processes your email address to deliver messages on our behalf.
• Cloudflare Turnstile: bot detection during registration. Turnstile is privacy-friendly (no CAPTCHAs) and does not track users across sites.
• Cloudflare Workers AI: edge AI inference for platform features. Data is processed within Cloudflare's network and not retained beyond the request lifecycle.

We do not sell your personal information to third parties. All third-party processors are bound by data processing agreements.

Data Retention

We retain different categories of data for different periods based on operational need and legal requirements:

• Account data: retained for as long as your account is active. Upon account deletion request, account data is removed within 30 days.
• Usage logs: server logs, API call records, and access logs are retained for 90 days, then permanently deleted.
• Deployment history: records of your deployments and associated metadata are retained for as long as your account remains active.
• Backups: backup copies of your data are purged within 30 days after an account deletion request is processed.
• Payment records: billing and transaction records are retained as required by applicable law, typically 7 years for tax and accounting purposes.
• Analytics data: raw analytics data is aggregated and anonymized after 90 days. Once aggregated, individual-level raw data is deleted. Anonymized, aggregated analytics may be retained indefinitely.

Where retention is required by law or necessary for legitimate business purposes such as fraud prevention, we may retain certain data beyond the periods listed above. To request deletion of your data, contact us at privacy@agentbuilders.app.

Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (subject to legal retention requirements).
• Export your data in a portable format.
• Object to or restrict certain processing of your data.
• Withdraw consent where processing is based on consent.

To exercise these rights, contact us at hello@agentbuilders.app. We will respond within 30 days.

If you are located in the European Economic Area, you also have the right to lodge a complaint with your local data protection supervisory authority.

Children's Privacy

AgentBuilders is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete that information promptly. If you believe a child has provided us with personal data, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the platform and updating the effective date. Continued use of the Service after changes constitutes acceptance of the updated policy.

Contact

Questions about this Privacy Policy? Contact us at hello@agentbuilders.app.