Privacy Policy

Last updated: March 4, 2026

1. Overview

Derivinate ("we", "our", "us") operates an AI-powered agent platform. This policy describes how we collect, use, and protect your information when you use our service.

2. Information We Collect

Account information: Email address and password when you create an account.
Payment information: Processed securely through Stripe. We store only your card brand and last 4 digits for display purposes. We never store full card numbers.
Connected services: When you connect Google, Calendly, Shopify, or other integrations, we store encrypted OAuth tokens to act on your behalf. We access only the data necessary to perform actions you request.
Conversations: Messages between you and your AI agent are stored to maintain conversation history and context.
Usage data: Token counts and costs for billing purposes.

3. How We Use Your Information

To provide and operate your AI agent
To process payments and manage your credit balance
To execute actions on connected services (sending emails, managing calendar, etc.) as directed by you
To send transactional emails (low balance alerts, account notifications)

4. Data Storage & Security

OAuth tokens are encrypted at rest using AES-256-GCM.
Passwords are hashed using industry-standard algorithms.
All data is stored on secured infrastructure.
We do not sell, rent, or share your personal data with third parties.

5. Third-Party Services

We integrate with the following services, each governed by their own privacy policies:

Google (Gmail, Calendar, Drive, Docs, Sheets, Contacts, Tasks)
Stripe (payment processing)
Calendly (scheduling)
Shopify (e-commerce)
Twilio (messaging)
Anthropic / OpenAI (AI model providers)

6. Data Retention

Your data is retained for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us.

7. Your Rights

Access, correct, or delete your personal data
Disconnect any integrated service at any time
Export your conversation history
Request account deletion

8. Cookies

We use localStorage for session tokens and preferences. We do not use tracking cookies or third-party analytics.

9. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via email.

10. Contact

For privacy-related questions, contact us at [email protected].