1. Introduction
VasperaMesh ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-agent governance control plane and related services. A core design principle: the audit ledger stores cryptographic digests of your agents' prompts and outputs — never the content itself. What enters the ledger's evidentiary fields (agent names, action names, decision reasons, cited source metadata) is immutable by design and retained permanently.
2. Information We Collect
Account Information
- Email address
- Name and profile information
- Authentication credentials (securely hashed)
- Payment information (processed by Stripe)
Usage Data
- API calls and mesh activity logs
- Agent configurations and workflow data
- Connected repository metadata (not source code content)
- Performance metrics and error logs
Technical Data
- IP addresses and browser information
- Device identifiers
- Cookies and similar tracking technologies
3. How We Use Your Information
- Provide, maintain, and improve our services
- Process transactions and send related information
- Send technical notices, updates, and support messages
- Respond to your comments, questions, and requests
- Monitor and analyze trends, usage, and activities
- Detect, prevent, and address technical issues and fraud
- Operate the audit ledger and policy-evaluation features you configure
4. Data Sharing
We do not sell your personal information. We may share your information with:
- Service Providers: Third parties that perform services for us (e.g., Stripe for payments, Supabase for database hosting)
- GitHub/GitLab: When you connect repositories, we interact with these platforms using OAuth tokens you authorize
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with any merger, sale, or acquisition
5. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption of data in transit (TLS) and at rest
- Secure token storage with encryption
- Regular security audits and monitoring
- Access controls and authentication requirements
6. Data Retention
We retain your information for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time by contacting us.
7. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing of your data
- Data portability
- Withdraw consent at any time
8. Cookies
We use essential cookies to maintain your session and preferences. We may also use analytics cookies to understand how you use our platform. You can control cookie settings through your browser.
9. Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
11. Contact Us
If you have questions about this Privacy Policy, please contact us at:
Email: support@vasperacapital.com
Company: Vaspera Capital LLC