Privacy Policy
Last updated: 2026-09-30
1. Who controls your data
the operator of Infera Agent is the controller of your personal data when you use Infera Agent. Privacy contact: legal@inferaagent.com.
2. What we collect
• Account data: name, email, password (stored as a one-way hash), and Google sign-in details if you choose it.
• Project content: the requests you write to the agent, files, images and code, app settings, and keys and secrets you save (encrypted).
• Usage and billing: the operations ledger and costs, payments (without card details), and your country for tax. We also note the approximate country you use the platform from, worked out on our own server from your internet address (IP geolocation by DB-IP, db-ip.com); the address itself isn't sent anywhere. To know how the site is used, we count visits without cookies: the page, the time it was open, the country and the kind of device.
• Technical data: IP address, browser type, error and security logs.
• How you use the platform (only if you accepted measurement on the cookie banner): the pages you open and the time on them, and the names of the buttons and tabs you use — never anything you type. We use it to understand where people get stuck, improve the platform and send you messages that help. And your gender and age range if you choose to tell us in your account (entirely optional). Page and button details are deleted after 180 days.
• Correspondence: support messages and emails you send to our addresses.
3. How we use it, and the legal basis
To provide the service and carry out your requests (contract); for billing, tax and accounting duties (legal obligation); for security, fraud prevention and improving the Platform (legitimate interest); and to send news or offers you can stop at any time (consent or legitimate interest, per applicable law). We do not sell your data.
4. AI processing by an external provider
To carry out your requests, the requests you write and the files, code and project context they need are sent to the AI model provider Anthropic in the United States, and the answer comes back to the Platform.
Under that provider's commercial terms, API inputs are not used to train its models; they may be kept for a limited time for safety and abuse prevention.
Don't put sensitive data the agent doesn't need into your requests (such as card numbers or other people's health data).
5. Where data is stored and international transfers
The Platform runs on servers in Germany (European Union) at Hetzner Online GmbH, where the database, projects and backups are stored. Some data may be transferred to other countries (including the United States) at the providers listed below, relying on the appropriate contractual safeguards those providers offer.
6. Who processes data for us
• Anthropic, PBC (United States): the AI model provider. The requests you write, and the files, code and project context each request needs, are sent to it.
• Hetzner Online GmbH (Germany, European Union): the servers the platform runs on, where the database, projects and backups are stored.
• Namecheap, Inc. (United States): the email service platform messages are sent from and your messages to us are received on.
• Google LLC: when you choose to sign in with Google (we receive only your name and email).
• Measurement tools (Google Analytics — Google LLC, Meta Pixel — Meta Platforms): they run on the platform's pages only after you accept the cookie banner, to measure visits and ads. You can decline with no effect on your use.
• Meta Platforms Ireland Ltd.: if you reached us from a Facebook or Instagram ad, we tell Meta about the sign-up or payment to measure that ad, sending your email hashed, never in plain text.
7. How long we keep it
We keep account and project data while the account is active. When you delete your account, projects and personal data are deleted within 30 days and leave backups as their cycle expires. Billing and payment records are kept as long as accounting and tax laws require, and security logs for a limited period.
8. Cookies and local storage
We use a necessary cookie to keep you signed in, a necessary cookie holding a random device identifier we generate (to recognise this browser or app for your account's security — it is not built from your hardware), an optional cookie to remember a trusted device when you choose “Remember this device”, and the browser's local storage for preferences such as language and theme. We don't use third-party advertising cookies.
9. Security
We encrypt connections (HTTPS) and saved keys and secrets, isolate every project, offer an email code at sign-in, and log security events. No system is perfectly secure; we will notify you as the law requires if a breach affects your data.
9a. Devices and sign-ins
To protect your account we keep, for each sign-in: a random device identifier we generate (set as a cookie, never derived from your hardware or MAC address), the approximate country, a masked form of your internet address (for example 197.54.12.x — the full address is not stored), a one-way salted hash of it so we can tell a new network from your usual one without keeping the address, the kind of browser or app, and the times. We do not collect your local/private IP, your MAC address, or any device fingerprint.
We use this only to show you your devices and sign-ins, to let you end a session or device, and to warn you of an unusual sign-in (a new device or country, a change too fast to be real travel). It never blocks your sign-in. You can see and manage all of it in Settings → Devices & sign-ins.
We keep active sessions until they expire or you end them, sign-in records for about 90 days, devices until you remove them or they go unused for 180 days, and we drop the masked address from older security-log entries after 90 days. The salt used for the address hash is rotated periodically.
10. Your rights
You may access, correct, delete and download your data, object to or restrict some processing, withdraw consent to marketing, and complain to the data protection authority in your country. Most of this is in Settings, or write to legal@inferaagent.com; we answer within 30 days.
11. Data of your apps' users
If you publish an app that collects data from its users, you are responsible for that data towards them; we process it on your behalf only to run and host the app.
12. Minors
The Platform is not directed at people under 18, and we don't knowingly collect their data.
13. Changes
We may update this policy and will notify you of material changes in the Platform. Last updated: 2026-09-30.