Privacy Policy

What we collect

Account information. Your name, email, and (if you create one) your organization.

Google Sign-In. If you sign in with Google, we receive your name, email address, profile photo, and Google account ID from Google — and nothing else. We use this only to create and secure your account and to pre-fill your profile. We store it the same way as any other account information (see “How long we keep it” below), and we never sell it, use it for advertising, or share it with anyone outside Guest Machines. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Content you upload. Documents, prompts, agent configurations, environment variables, and other data you put into the Service so your agents can use it.

Usage data. Logs of what your agents and team members did on the platform — runs, tool calls, costs, errors, and timestamps. This is what powers the audit history and usage dashboards you see in the product.

Device and connection data. IP address, browser type, and similar information collected automatically when you use the Service. We use this to keep the Service secure and reliable.

Billing information. If you’re on a paid plan, we collect what we need to bill you. Card details are handled by our payment processor — we don’t store full card numbers ourselves.

How we use it

We use what we collect to:

• Run the Service and the agents you ask us to run.
• Show you usage, costs, audit trails, and other dashboards inside the product.
• Keep the platform secure and prevent abuse.
• Handle billing and account communications (receipts, security alerts, important policy updates).
• Improve the product, debug issues, and measure how features are used in aggregate.

We don’t sell your personal information, and we don’t train our own AI models on the content you upload.

Third parties we share with

To run the Service we work with a small set of providers, each of whom is contractually bound to handle your data on our behalf:

• Model providers (such as OpenAI and Anthropic) — when an agent calls a model, the prompt and any context you’ve attached are sent to the provider you chose.
• Sign-in providers (Google). When you sign in with Google, Google verifies your identity and shares your basic profile information with us as described in What we collect above.
• Hosting and infrastructure — the cloud providers that run our servers, databases, and backups.
• Payment processors — for billing and tax reporting on paid plans.
• Tools you connect. When you connect a third-party tool to an agent, the data you choose to send flows to that tool’s provider under their terms.
• Analytics. If you opt in via our cookie banner, we use Google Analytics and Grafana Cloud frontend observability to understand usage, performance, and browser failures. See Cookies below for details and how to opt out.

We’ll also share data when required by law, when necessary to investigate fraud or security incidents, or as part of a merger or acquisition (in which case we’ll let you know).

How long we keep it

We keep account and content data while your account is active, and for a reasonable period afterward to support backups, billing reconciliation, and legal obligations. Audit logs are retained for the period set by your plan.

You can delete content from inside the product at any time. When you close your account, we delete or anonymize your data within a reasonable period unless we’re required to keep some of it (for example, for tax or fraud-prevention reasons).

Your controls

Depending on where you live, you may have rights to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing. You can exercise most of these directly inside the product — and for anything you can’t, email us using the address below and we’ll help.

Cookies

Essential cookies. We use cookies and similar technologies for sign-in, security, and remembering your preferences. These run automatically because the Service can’t function without them.

Analytics cookies. With your consent, we use Google Analytics to understand how visitors use our site (pages viewed, general location, device type) and Grafana Cloud to collect browser errors, performance measurements, and request traces. We do not send form values, console contents, account identity, or URL query strings to Grafana, and we do not record session replays. These providers may process data on servers outside your country. We don’t use third-party advertising cookies.

You choose whether to allow analytics cookies the first time you visit, and you can change your mind at any time from the “Cookie Preferences” link in the site footer.

Security

We use industry-standard practices — encryption in transit and at rest, access controls, audit logging, and regular reviews — to protect the data you trust us with. No system is perfect; if we ever discover a breach affecting your account, we’ll tell you promptly.

Children

The Service isn’t intended for people under 18. We don’t knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. If a change is material, we’ll let you know in the product or by email before it takes effect.

Contact

Questions about privacy, or want to exercise a right? Email privacy@guestmachines.com.