In short
- We collect what we need to run Studio: your sign-in identity, your organization's projects and runs, and billing and security records.
- Your organization owns its project content. We process it only to provide Studio and do not use it to train AI models.
- Credentials you store are encrypted, and exports contain only references to them.
- We do not sell personal data, and we use no advertising or analytics cookies.
- Write to info@algen.ai to access, correct, or erase your data.
1. Who we are
Algen Agent Studio ("Studio") is operated by Algen AI Private Limited ("AlgenAI", "we", "us"). This policy explains how we handle personal data when you use the hosted Studio service, its sign-in pages, and its public documentation. It is published under India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and the rules made under them.
If you run Studio yourself on your own computer or infrastructure, the data stays on systems you control and this policy does not apply to it.
2. Your organization and us
Studio is used through organizations. For account, security, and billing data, AlgenAI decides how the data is used. For the content an organization puts into Studio — projects, agent instructions, workflows, run inputs and outputs, evaluation cases, and imported source code — we process it on the organization's behalf and under its instructions. Organization admins manage membership and that content. If you are a member, contact your organization admin first about content they control.
3. Information we collect
| Category | Examples | Source |
|---|---|---|
| Account | Name, email address, profile picture, the Google or GitHub account identifier, and whether the email is verified. | Google or GitHub, when you sign in |
| Organization | Organization name, members, roles, and the email addresses of people invited. | You and your organization admins |
| Project content | Agent configurations, instructions, workflows, prompts, run inputs and outputs, files and artifacts, evaluation cases, build images, and source code imported from Git. | You and your organization |
| Credentials | API keys and other secrets you store for model providers, tools, and data sources. | You |
| Integrations | For a connected GitHub account: its login, account type, installation identifier, and repository selection. | GitHub, when an admin connects it |
| Billing | Subscription plan, credit purchases and balance, metered usage, and payment references. Card and bank details are handled by our payment provider and never reach Studio. | You and our payment provider |
| Security and usage | Session records, browser user agent, a hashed form of your IP address, audit-log entries of actions taken, timestamps, and service logs. | Your use of Studio |
| Communications | Messages you send us for support or other requests. | You |
4. How we use it
- To provide Studio — sign you in, run your agents, builds, evaluations, and deployments, and show your organization its work.
- To bill — meter managed compute, reserve and settle credits, and keep records required for tax and accounting.
- To keep Studio secure — manage sessions, enforce roles, detect abuse, keep audit logs, and investigate incidents.
- To communicate — send invitations, service and security notices, and replies to your requests.
- To meet legal obligations — and to establish or defend legal claims.
We use your data on the basis of your consent, given when you sign in and accept these terms, and for the legitimate uses permitted by law, such as meeting legal obligations and keeping the service secure. We do not use project content to train AI models, and we do not sell personal data.
5. Model providers and tools you configure
When an agent runs, Studio sends the relevant prompts, inputs, and tool calls to the model providers, tools, and data sources your project is configured to use, with the credentials you supplied. Those providers handle the data under their own terms and privacy policies. Choose providers whose data practices meet your needs, and do not send data to an agent that you are not permitted to share with its providers.
6. Who we share data with
We share personal data only as needed to run Studio:
- Amazon Web Services — hosting, storage, compute, and invitation email delivery.
- Google and GitHub — sign-in, and GitHub repository access your organization grants.
- Razorpay — payment processing for subscriptions and credit purchases.
- Algen Agent Hub — when you publish an agent, the listing and package you submit. Credentials are never included.
- Other members of your organization — according to their roles.
- Authorities — where required by law, or to protect the rights, safety, and security of our users and the service.
- A successor — if AlgenAI is involved in a merger, acquisition, or sale of assets, subject to this policy.
7. Where data is stored
Hosted Studio stores data primarily in India, in the AWS Asia Pacific (Mumbai) region. Some service providers, and the model providers you configure, may process data in other countries. Where data leaves India, we do so as permitted under Indian law.
8. How long we keep it
- Account and organization data — while the account or organization is active, then deleted or anonymized within a reasonable period, unless we must keep it longer.
- Project content — until your organization deletes it. Run artifacts expire automatically, after 30 days by default. Revision history of a deleted project may be kept so its builds stay verifiable.
- Security and audit records — for as long as needed to protect the service and investigate incidents.
- Billing records — for as long as Indian tax and accounting law requires.
9. Security
We protect data with encryption in transit, encryption of stored credentials with AES-GCM, isolation between organizations, role-based access controls, short-lived and narrowly scoped access tokens for integrations, and audit logging. No system is perfectly secure. If a breach affects your personal data, we will notify you and the authorities as the law requires.
10. Cookies and local storage
Studio uses an essential session cookie to keep you signed in and to protect your requests from forgery. We do not use advertising or analytics cookies. The documentation pages remember your theme choice in your browser's local storage. Our pages load fonts from Google Fonts, which receives your IP address when they load.
11. Your rights
Subject to the law, you can:
- ask for a summary of the personal data we hold about you and how we use it;
- ask us to correct, complete, update, or erase it;
- withdraw your consent, which may mean you can no longer use Studio;
- nominate someone to exercise these rights if you die or become incapacitated; and
- raise a grievance with us, and if it is not resolved, complain to the Data Protection Board of India.
Email info@algen.ai. We may need to verify your identity, and we will respond within the time the law requires. You can also unlink sign-in identities and end sessions yourself under Settings › Security.
12. Children
Studio is a professional tool and is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.
13. Changes to this policy
We may update this policy as Studio changes. We will post the new version here with a new effective date, and tell you in Studio or by email before material changes take effect.
14. Contact and grievances
For privacy questions, requests, or grievances, write to Algen AI Private Limited at info@algen.ai.