Privacy Policy

Custodyn ("we", "our", "us") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

1. What We Collect

• Account information — your name, email address, and hashed password when you register
• Agent activity logs — records of actions your AI agents take, including action type, target, risk level, and outcome
• Usage data — how many actions your agents perform each month for billing purposes
• Payment information — processed securely by Razorpay; we never store card numbers

2. How We Use Your Data

• To provide the Custodyn service — storing and displaying your audit logs
• To enforce your subscription tier limits
• To send important service updates and billing notifications
• To improve Custodyn based on usage patterns (anonymized)

3. Data Storage & Security

Your audit logs are stored in an encrypted database. All data is transmitted over HTTPS/TLS 1.3. Passwords are hashed and never stored in plain text. Audit logs are sealed with tamper-proof SHA-256 hashes.

4. Data Retention

Audit log retention depends on your subscription tier:

• Free plan — 7 days
• Starter plan — 30 days
• Pro plan — 90 days
• Business plan — 1 year
• Enterprise plan — forever

Account data is retained until you delete your account.

5. Data Sharing

We do not sell your data. We do not share your data with third parties except:

• Razorpay — for payment processing
• Cloud hosting providers — to run our infrastructure
• Legal requirements — if required by law

6. Your Rights

• Request a copy of all data we hold about you
• Request deletion of your account and all associated data
• Export your audit logs at any time from the dashboard
• Update your account information at any time

7. Cookies

We use only essential cookies required for authentication. We do not use tracking or advertising cookies.

8. Contact

For privacy questions, email us at privacy@custodyn.app