Privacy Policy

This Privacy Policy applies to AutronAI and the platform features used to build, connect, deploy, and operate AI agents. It covers information associated with account owners, authorized users, people interacting with configured Bots, and users communicating through connected channels.

When you create or use an AutronAI account, we process information needed to identify and authenticate you, such as your name, email address, account identifiers, authentication records, settings, roles, and security-related session information. If you sign in or connect a service through OAuth, the relevant provider may give AutronAI account identifiers, granted permissions, authorization tokens, token expiry information, and other information required to maintain the connection.

When a request is sent to an AI agent, AutronAI may process the submitted message, generated response, relevant conversation context, associated Bot and Integration identifiers, attachment information, request status, timing information, errors, and other operational metadata needed to deliver and troubleshoot the request. Depending on the channel, requests may also include identifiers supplied by the connected communication platform.

When you upload documents, AutronAI processes the file and related metadata so the content can be prepared for retrieval by configured Agents. This may include extracting content, creating searchable representations, storing source metadata, and maintaining processing status. Uploaded content remains associated with the relevant workspace resources until it is deleted or another applicable retention process removes it.

AutronAI allows users to connect databases and upload structured files such as CSV or Excel. The platform may process connection configuration, source metadata, schemas, tables, columns, relationships, access rules, descriptions, and query results required by configured Agents. Users can restrict which tables and columns an Agent is allowed to access and should grant only the access necessary for the intended use case.

Memory stores reusable context that a configured Bot may retrieve when it becomes relevant. Memory content and related metadata may be processed into searchable representations so the system can identify relevant context during future requests. Users should not place passwords, API keys, authentication tokens, private connection strings, or unnecessary sensitive personal information in Memory.

AutronAI stores the configuration used to define how AI capabilities operate, including Agent names, descriptions, instructions, selected resources, Skills, and tool assignments. Skills may contain reusable instructions for performing particular tasks. Agent configuration may reference structured data, documents, installed MCP tools, or other capabilities selected by the user.

When you connect a Bot to a supported communication channel, AutronAI processes the configuration and identifiers needed to route messages between the channel and the configured Bot. Depending on the integration, this may include channel identifiers, configuration, connection status, message identifiers, authentication information, and messages exchanged through services such as Web, Messenger, Telegram, or Zalo. The connected provider also processes information according to its own terms and privacy practices.

Some integrations, data sources, and tools require credentials such as access tokens, API keys, OAuth authorization, or database connection information. AutronAI processes these credentials only as needed to establish and operate the connections you configure. Secret values should only be entered into fields specifically designed for credentials. Do not place passwords, tokens, API keys, or connection strings in Bot descriptions, Agent instructions, Memory, uploaded documents, support tickets, or ordinary messages.

When you install or connect an MCP server, AutronAI may process server configuration, authentication information, available tool metadata, and the tools assigned to Agents. When an Agent calls an MCP tool, the information required to perform that action may be sent to the selected MCP server. That server or the service behind it may process the request under its own terms and privacy practices. Users should review the permissions and tools exposed by an MCP server before making them available to an Agent.

AutronAI processes Automation configuration so eligible Bots can perform scheduled work. This may include the Automation name, instructions, schedule, timezone, associated Bot or channel information, status, and execution history. Automation runs may process information through the Agents, Memory, tools, data sources, model providers, and communication channels involved in the configured task. Run records may include scheduled and completion times, execution status, attempts, results, delivery information, response time, and errors.

AutronAI uses configured AI model providers to process requests. Information sent to a provider may include the user's request, relevant conversation context, instructions, retrieved document or data excerpts, Memory, and tool results required to perform the task. The specific information sent depends on the Agent, model, resources, and capabilities involved in the request. Model and usage information may also be processed for request accounting, cost tracking, reliability, and platform operation.

AutronAI processes operational information needed to measure and run the service, including request counts, model usage, token usage, cost, latency, status, errors, platform or source dimensions, Automation execution information, and billing-related records. Technical logs and request identifiers may also be processed to investigate failures, maintain reliability, prevent abuse, and support users.

Information may be shared with infrastructure providers, AI model providers, connected communication platforms, MCP servers, authentication providers, payment services, or other external services when necessary to provide a feature that you configure or request. When you intentionally connect a third-party service, information required for that interaction may be sent to that service. AutronAI administrators may access account or resource information when necessary to operate, secure, troubleshoot, or support the service, subject to applicable access controls.

AutronAI uses technical and organizational measures intended to protect accounts, platform data, and connected credentials. These measures include authenticated access, resource ownership controls, protected credential handling, restricted secret exposure, and safeguards around platform requests. No online service can guarantee absolute security. Users should protect their account credentials, limit external permissions to what is necessary, and revoke credentials that may have been exposed.

AutronAI uses browser storage and cookies where needed for authentication and product preferences. For example, authentication sessions may rely on cookies, while preferences such as language, appearance, timezone, or workspace state may be stored in the browser. Additional browser technologies may be introduced as the product evolves, and this policy should be updated when their purpose materially changes.

AutronAI retains different categories of information for different periods depending on the purpose of the data, the resource lifecycle, operational requirements, security needs, and applicable legal obligations. Temporary processing data may be removed after its immediate purpose is complete. User-managed resources such as data sources, documents, Memory, Agents, MCP instances, and Integrations can be removed through supported product workflows, subject to dependencies and operational records. Some usage, billing, security, and execution records may be retained separately from the resource that generated them.

Depending on the infrastructure, model provider, communication channel, MCP server, or other external service selected for a request, information may be processed in countries outside the user's location. The location and handling of information by an external provider are also governed by that provider's infrastructure and privacy practices.

AutronAI provides controls for managing supported resources and connections, including updating account information, changing resource configuration, disconnecting integrations, removing MCP instances, deleting supported resources, and signing out of active use. Depending on where you live, applicable law may provide additional rights concerning personal information. Requests related to access, correction, deletion, or other privacy matters can be sent to the contact address below.

We may update this Privacy Policy when AutronAI changes its features, providers, data flows, security practices, or legal obligations. When the policy is updated, the date shown at the top of this page will also be updated. Where appropriate, additional notice may be provided through the product or another communication channel.

If you have questions or requests related to privacy or personal information, contact AutronAI at: contact@autronai.com