1. Information We Collect
Account Information
When you register for an account, we collect your name, email address, and a hashed credential. If you sign in via a third-party OAuth provider (e.g., Google), we receive only the information that provider makes available to us under your consent.
Usage Data
We automatically collect information about how you interact with the Service, including the pages you visit, actions you take, timestamps, and feature usage patterns. This data is used exclusively to operate, maintain, and improve the Service.
Agent & Workflow Data
Content you submit to the Service — including burro configurations, task definitions, approval records, and message thread contents — is stored and processed on your behalf to deliver the Service. You retain full ownership of this data.
Log & Diagnostic Data
Our servers automatically record log data including IP addresses, browser type, referring URLs, error reports, and crash information. This data is used solely for security monitoring, debugging, and reliability purposes.
2. How We Use Your Information
- 1To provision, operate, and maintain your account and organisation workspace.
- 2To send transactional emails such as password resets, security alerts, and service notifications.
- 3To monitor and enforce our Acceptable Use Policy and prevent fraud or abuse.
- 4To analyse aggregated, anonymised usage patterns for product improvement.
- 5To comply with applicable legal obligations and respond to lawful requests from public authorities.
We do not use your data to train AI models, serve advertising, or sell your information to third parties.
4. Data Retention
We retain personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymise your personal information within 30 days, except where we are required to retain it for legal, regulatory, or fraud-prevention purposes. Anonymised and aggregated data derived from your usage may be retained indefinitely.
5. Security
We implement industry-standard technical and organisational measures to protect your information, including TLS encryption in transit, encrypted storage at rest, and access controls limiting employee access to personal data on a strict need-to-know basis. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security, but we commit to promptly notifying affected users of any confirmed data breach in accordance with applicable law.
6. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
Access
Request a copy of the personal data we hold about you.
Correction
Request correction of inaccurate or incomplete personal data.
Erasure
Request deletion of your personal data ("right to be forgotten").
Portability
Receive your data in a structured, machine-readable format.
Restriction
Request that we restrict processing of your personal data.
Objection
Object to processing based on our legitimate interests.
To exercise any of these rights, contact us at privacy@burros.ai. We will respond within 30 days.
8. Third-Party Services
The Service may contain links to third-party websites or integrate with third-party APIs at your direction (e.g., AI model providers you configure). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before connecting any external service.
9. Children’s Privacy
The Service is intended solely for users aged 18 or older. We do not knowingly collect personal information from individuals under 18. If we become aware that a child under 18 has provided personal information to us, we will delete it promptly. If you believe we have inadvertently collected such information, please contact us at privacy@burros.ai.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date above. For significant changes, we will also send an email notification to the address associated with your account at least 14 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the revised policy.
11. Contact Us
If you have questions or concerns about this Privacy Policy, please contact our data protection team: