Privacy Policy

1 Overview

We operate an AI Platform that enables users to build and run multi-agent systems. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

This Privacy Policy explains how we collect, use, store, and protect your information when you use MulAgents.

2 Data We Collect

We follow a data minimization principle — we only collect what is necessary to operate and improve our service.

Information You Provide

• Account information (e.g., email, name)
• Billing information (processed via third-party providers)
• User inputs to the platform (prompts, configurations, workflows)

Automatically Collected Data

• Usage data (e.g., API calls, token usage)
• Log data (IP address, device type, timestamps)
• Performance metrics (error logs, latency)

3 Sensitive Data Policy

We do not intentionally collect, process, or store sensitive personal data, including:

• Health information
• Biometric identifiers
• Financial account credentials (beyond payment processors)
• Government-issued IDs
• Race, religion, or political beliefs

4 How We Use Data

We use collected data strictly for:

• Providing and maintaining the platform
• Processing requests within the multi-agent system
• Monitoring system performance and reliability
• Improving features (only with anonymized/aggregated data)

We do not sell personal data.

5 Data Masking & Security

We implement multiple layers of safeguards to protect your data:

• Masking & Redaction: Sensitive fields are automatically anonymized where possible
• Encryption: Data is encrypted in transit (TLS) and at rest (AES-256)
• Access Control: Strict role-based access policies limit internal data access
• Isolation: Logical separation between user environments

6 Data Retention

We retain data only as long as necessary:

• Active account data: retained while your account is active
• Logs and analytics: retained for 30–90 days
• Deleted data: removed or anonymized within a reasonable timeframe after deletion request

7 Your Rights (GDPR & CCPA)

You have full control over your data. The following rights are available to you:

• Access & Portability: Request a copy of your data and how it's processed
• Correction: Request corrections to inaccurate or incomplete data
• Deletion ("Right to be Forgotten"): Delete your account and request full data removal
• Opt-Out Rights (CCPA): Opt out of any data sharing (we do not sell data)
• Restriction & Objection (GDPR): Restrict or object to certain processing activities

To exercise your rights, contact us at: kanpham@mulagents.com

8 Third-Party Services

We may use third-party providers for:

• Payment processing (e.g., Stripe)
• Infrastructure hosting (e.g., AWS)
• Monitoring and analytics

All providers are contractually obligated to comply with applicable data protection laws through Data Processing Agreements (DPAs).

9 International Data Transfers

If data is transferred outside your jurisdiction (e.g., from the EU to the US), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) where required by GDPR.

10 Children's Privacy

Our service is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If we become aware of such data, we will delete it promptly.

11 Updates to This Policy

We may update this policy periodically to reflect changes in our practices or legal requirements. Significant changes will be communicated via email or a prominent notice on the platform.

12 Contact

For privacy-related inquiries, requests, or concerns, please reach out to our Privacy team:

Email: kanpham@mulagents.com

We will respond to all privacy requests within 30 days as required by applicable law.