Privacy Policy - Aphelion

Introduction

Centauri Systems, Inc. ("Aphelion," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, including our website, APIs, SDKs, and related services (collectively, the "Service").

Information We Collect

Account Information

When you create an account, we collect your email address, name, and payment information. For organization accounts, we may also collect company name and billing address.

Usage Data

We collect information about how you interact with the Service, including API calls made, tools executed, timestamps, response times, and error rates. This data is used to provide the Service and improve its performance.

Agent Data

When you use our platform, agents may store memory and context data as part of normal operation. This data is associated with your account and is subject to the data retention policies you configure.

Third-Party Credentials

When you connect third-party services (e.g., Stripe, Slack, GitHub), we store OAuth tokens and API keys necessary to access those services on your behalf. These credentials are encrypted at rest and only used to execute authorized tool calls.

How We Use Your Information

To provide, maintain, and improve the Service
To process transactions and send related information
To send technical notices, updates, and security alerts
To respond to your comments, questions, and support requests
To monitor and analyze usage patterns and trends
To detect, prevent, and address technical issues and fraud

Data Retention

We retain your account information for as long as your account is active. Usage logs are retained for 90 days. Agent memory data is retained according to your configured policies and can be deleted at any time through the API or console.

When you delete your account, we will delete or anonymize your data within 30 days, except where we are required to retain it for legal or compliance purposes.

Data Security

We implement industry-standard security measures to protect your data:

All data is encrypted in transit using TLS 1.3
All data is encrypted at rest using AES-256
Credentials are stored using envelope encryption with hardware security modules
Access to production systems is restricted and audited
We conduct regular security assessments and penetration testing

Information Sharing

We do not sell your personal information. We may share information in the following circumstances:

Service Providers: With vendors who assist in providing the Service, under strict confidentiality agreements
Third-Party Integrations: With services you explicitly connect, to the extent necessary to execute tool calls
Legal Requirements: When required by law, subpoena, or legal process
Business Transfers: In connection with a merger, acquisition, or sale of assets

Your Rights

Depending on your location, you may have the following rights:

Access and receive a copy of your personal data
Rectify inaccurate personal data
Request deletion of your personal data
Object to or restrict processing of your personal data
Data portability
Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@aphl.ai.

International Transfers

Your information may be transferred to and processed in countries other than your own. We use Standard Contractual Clauses and other appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy.

Cookies

We use essential cookies to maintain session state and authentication. We do not use tracking cookies or third-party analytics cookies. You can configure your browser to reject cookies, but this may affect your ability to use the Service.

Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@aphl.ai
Address: Centauri Systems, Inc., San Francisco, CA