Privacy Policy

1. Data Fiduciary

Agonix acts as the Data Fiduciary for personal data processed through this platform. Contact: syntaxcraftershub@gmail.com

2. Information We Collect

• Account data: Name and email address for authentication and service delivery.
• Usage data: API call logs (retained 90 days), token consumption, latency metrics, and agent configurations.
• Payment data: Order ID and payment reference processed via Razorpay. We do not store card numbers or UPI IDs.
• Communications: Messages sent via email or contact forms.

3. Purpose & Lawful Basis

We process your personal data for the following purposes, each grounded in your consent or contractual necessity:

• Provisioning and managing your AI agents (contractual necessity)
• Sending transactional emails — invoices, activation confirmations, refund notices (contractual necessity)
• Platform monitoring and security (legitimate interest)
• Aggregated, anonymised product improvement (legitimate interest — no individual identification)

4. Data Sharing & Third Parties

We do not sell your personal data. We share data only with:

• Supabase (Singapore): Database and authentication — processes account and usage data.
• Anthropic (USA): AI inference — message content is processed to generate agent responses. Subject to Anthropic's data processing terms.
• Razorpay (India): Payment processing — subject to Razorpay's privacy policy.
• Resend (USA): Transactional email delivery — name and email only.
• Law enforcement / Government: Only when required under Indian law (IT Act, 2000; DPDP Act, 2023).

5. Cross-Border Data Transfers

Some of our service providers are located outside India (Anthropic, Resend, Supabase). Data transfers are subject to applicable safeguards and the DPDP Act's provisions on cross-border transfers. By using the Service, you consent to these transfers as necessary for service delivery.

6. Data Retention

Account data is retained for the duration of your subscription plus 12 months. API usage logs are automatically deleted after 90 days (enforced via database policy). Payment records are retained for 7 years as required by Indian accounting law. You may request deletion of your personal data at any time; deletion of payment records may be subject to legal retention obligations.

7. Your Rights (DPDP Act, 2023)

As a Data Principal under the DPDP Act, you have the right to:

• Access: Request a summary of personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data (subject to legal retention requirements).
• Grievance Redressal: Lodge a complaint with our Grievance Officer (see below).
• Nominate: Nominate another person to exercise rights on your behalf in case of death or incapacity.

To exercise any right, email syntaxcraftershub@gmail.com. We will respond within 30 days.

8. Grievance Officer

In accordance with the DPDP Act, 2023 and the IT Act, 2000: Devesh (Founder), Agonix — syntaxcraftershub@gmail.com. Grievances acknowledged within 24 hours, resolved within 15 days.

9. Security

We implement reasonable security practices as mandated by the IT (SPDI) Rules, 2011: TLS encryption in transit, HMAC-SHA256 signed API keys, row-level security on all database tables, and 90-day log rotation. No system is 100% secure — protect your API keys and report any suspected breach to us immediately.

10. Cookies

We use essential cookies for authentication only. See our Cookie Policy for details.

11. Changes to This Policy

We may update this policy to reflect changes in law or our practices. Material changes will be notified via email. Continued use of the Service after notification constitutes acceptance.

12. Contact

Questions? Email syntaxcraftershub@gmail.com.