Privacy Policy

RixyAgent ("we", "us") is an enterprise "AI employee" SaaS platform. Customers create AI agents that chat across channels, use tools, run code, and retain memory.

This Privacy Policy explains how we collect, use, share, and protect information when you use RixyAgent. By using the service, you agree to the practices described here.

Account information: the email, company name, and related account details you provide at sign-up.

Conversation and message data: the content of conversations and messages between you (or your end users) and your AI agents.

Uploaded files: documents and files you upload to your company knowledge base.

Connected-channel credentials: the keys and tokens used to connect third-party channels, stored encrypted with AES-256-GCM.

Usage and billing metadata: Credit consumption records, subscription status, invoice details, and technical logs needed to deliver the service.

To provide, maintain, and improve the service, including running the AI agents you create and executing their tasks.

To process billing, manage subscriptions, and meter Credit consumption based on usage.

To secure the platform, detect abuse, troubleshoot issues, and meet legal obligations.

To communicate with you about service updates, security matters, and support, within the scope you permit.

To improve your own AI agents, conversations may be stored as vector memory so your agents can recall prior context and conclusions.

All memory and data are isolated per tenant. One tenant's data is never shared with another tenant.

We do not use your data to train third-party foundation models beyond passing the content necessary to model providers to serve your requests.

To deliver the service, some data may be processed by the following third parties:

Payment processing: Stripe, for subscriptions and payment processing.

Large-language-model providers: accessed via aggregators (e.g. OpenRouter) and other model vendors to generate your AI agents' responses.

Cloud hosting: Railway, for running our application infrastructure.

Object storage: Cloudflare R2, for storing uploaded files and knowledge-base content.

Data is encrypted in transit and at rest.

Connected-channel credentials are stored encrypted with AES-256-GCM.

Data is isolated per tenant so each customer's data stays separate.

User code is executed in isolated sandbox containers to limit its access.

We retain your data for as long as needed to provide the service to you, or as required by law.

You may request deletion of your account and associated data; once deleted, data is removed from our active systems within a reasonable technical timeframe.

Certain billing and compliance records may be retained longer where required by legal obligations.

You have the right to access, export, and delete your personal data.

You may correct inaccurate account information.

To exercise any of these rights, contact us at [email protected].

Our sub-processors may process data outside your country of residence. We take reasonable measures to ensure such transfers are appropriately safeguarded.

We use cookies and similar technologies to maintain login sessions and preferences.

We use Google Analytics 4 (GA4) to understand site usage and improve the service. You can manage cookie preferences in your browser.

The service is intended for businesses and is not directed to children under 16, and we do not knowingly collect their personal information.

We may update this Privacy Policy from time to time. Material changes will be announced on the site or via email, and the "Last updated" date above will be revised.

If you have any questions about this Privacy Policy, contact us at [email protected].