Privacy Policy
Our policy outlines how we collect, use, and protect your information when you use our services.
Pylons, LLC ("Pylons," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI agent infrastructure platform and related services (collectively, the "Services").
By accessing or using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Services.
1. Information We Collect
We collect information in the following categories:
1.1 Information You Provide
- Account Information: Name, email address, company name, job title, phone number, and password when you create an account
- Billing Information: Payment card details, billing address, and tax identification numbers (processed by our payment processor)
- Communications: Information you provide when contacting support, submitting feedback, or participating in surveys
- AI Agent Data: Configurations, prompts, training data, and other content you upload to create and manage AI agents
1.2 Information Collected Automatically
- Usage Data: Pages visited, features used, actions taken, time and date of visits, and session duration
- Device Information: IP address, browser type and version, operating system, device identifiers, and screen resolution
- Log Data: Server logs, error reports, and performance metrics
- Location Data: Approximate location based on IP address
1.3 Information from Third Parties
- Authentication Providers: If you sign in via third-party services (Google, GitHub), we receive profile information they share
- Business Partners: Information from partners for account verification or fraud prevention
- Public Sources: Publicly available information to supplement our records
2. How We Use Your Information
We use collected information for the following purposes:
2.1 Providing and Improving Services
- Create and manage your account
- Provide, operate, and maintain the Services
- Process transactions and send billing notifications
- Develop new features and improve existing functionality
- Analyze usage patterns and optimize performance
2.2 Communications
- Send service-related notifications (account alerts, security updates, maintenance)
- Respond to your inquiries and support requests
- Send marketing communications (with your consent where required)
- Deliver product updates and announcements
2.3 Security and Compliance
- Detect, prevent, and investigate fraud, abuse, and security incidents
- Enforce our Terms of Service and Acceptable Use Policy
- Comply with legal obligations and respond to lawful requests
- Protect the rights and safety of Pylons, our users, and third parties
3. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
3.1 Service Providers
We share information with third-party vendors who perform services on our behalf, including cloud hosting, payment processing, email delivery, analytics, and customer support. These providers are contractually bound to use your information only to provide services to us.
3.2 Legal Requirements
We may disclose information if required by law, regulation, legal process, or governmental request. We may also disclose information to enforce our Terms, protect our rights, or ensure the safety of our users or the public.
3.3 Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and any choices you may have.
3.4 With Your Consent
We may share your information with third parties when you have given us explicit consent to do so.
4. AI Agent Data Handling
Given the nature of our Services, we handle AI-related data with special care:
4.1 Customer Data Processing
- Data you process through AI agents ("Customer Data") remains your property
- We process Customer Data solely to provide the Services
- We do not use Customer Data to train our own AI models
- We do not access Customer Data except as necessary to provide support, investigate issues, or as required by law
4.2 AI Agent Outputs
Outputs generated by your AI agents are considered Customer Data and are treated accordingly. We may retain logs for debugging and service improvement, but these are processed in accordance with our data protection measures.
4.3 Data Isolation
Your AI agents and associated data are logically isolated from other customers. We implement technical and organizational measures to prevent unauthorized access or data leakage between customers.
5. Data Retention
We retain your information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
5.1 Retention Periods
- Account Information: Retained while your account is active and for up to 30 days after deletion
- Customer Data: Retained while your account is active; deleted within 30 days of account termination
- Billing Records: Retained for 7 years for legal and tax compliance
- Logs and Analytics: Retained for up to 12 months
- Support Communications: Retained for up to 3 years
5.2 Deletion
When data is no longer needed, we securely delete or anonymize it. Some information may be retained in backups for a limited period before permanent deletion.
6. Data Security
We implement comprehensive security measures to protect your information:
6.1 Technical Measures
- Encryption in transit (TLS 1.2+) and at rest (AES-256)
- Regular security assessments and penetration testing
- Intrusion detection and prevention systems
- Access controls and multi-factor authentication
- Regular security patching and updates
6.2 Organizational Measures
- Employee security training and confidentiality agreements
- Role-based access controls and least privilege principles
- Incident response and breach notification procedures
- Regular security audits and compliance reviews
Despite our efforts, no security system is impenetrable. We cannot guarantee absolute security but will promptly notify affected users of any security breach as required by law.
7. International Data Transfers
Pylons is based in the United States, and your information may be processed and stored in the United States or other countries where our service providers operate.
When we transfer data internationally, we implement appropriate safeguards, including Standard Contractual Clauses approved by relevant authorities, data processing agreements with sub-processors, and technical and organizational security measures.
By using the Services, you consent to the transfer of your information to the United States and other jurisdictions as described in this policy.
8. Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal information:
8.1 Access and Portability
Request access to your personal information and receive a copy in a portable format.
8.2 Correction
Request correction of inaccurate or incomplete information.
8.3 Deletion
Request deletion of your personal information, subject to legal and contractual retention requirements.
8.4 Restriction
Request restriction of processing in certain circumstances.
8.5 Objection
Object to processing based on legitimate interests or for direct marketing purposes.
8.6 How to Exercise Your Rights
To exercise any of these rights, please contact us at info@pylons.io. We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request.
9. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience:
9.1 Types of Cookies
- Essential Cookies: Required for the Services to function (authentication, security)
- Functional Cookies: Remember your preferences and settings
- Analytics Cookies: Help us understand how you use the Services (Google Analytics)
- Marketing Cookies: Used to deliver relevant advertisements (with consent)
9.2 Managing Cookies
You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Services. Most browsers allow you to refuse cookies or alert you when cookies are being sent.
10. Third-Party Services
The Services may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to third-party services. We encourage you to review the privacy policies of any third-party services you access.
We are not responsible for the privacy practices of third parties. Your use of third-party services is at your own risk.
11. Children's Privacy
The Services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected information from a child under 18, we will take steps to delete it promptly.
If you believe we have inadvertently collected information from a child, please contact us at info@pylons.io.
12. Regional Privacy Rights
Depending on your location, you may have additional rights under local privacy laws:
12.1 California Residents (CCPA/CPRA)
California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:
- Right to know what personal information is collected and how it is used
- Right to delete personal information
- Right to opt-out of the sale or sharing of personal information (we do not sell personal information)
- Right to non-discrimination for exercising privacy rights
- Right to correct inaccurate personal information
- Right to limit use of sensitive personal information
To exercise these rights, contact us at info@pylons.io.
12.2 European Economic Area (GDPR)
If you are in the EEA, UK, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), including:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restriction of processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
- Right to lodge a complaint with a supervisory authority
Our legal bases for processing include: performance of contract, legitimate interests, consent, and legal obligations.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Update the "Last Updated" date at the top of this policy
- Notify you via email or in-app notification for significant changes
- Post the updated policy on our website
Your continued use of the Services after any changes indicates your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Pylons, LLC
30 N Gould St Ste R
Sheridan, WY 82801
United States
Email: info@pylons.io
Website: pylons.io
We will respond to your inquiry within 30 days or as required by applicable law.
Appendix: Sub-Processor List
We use the following categories of sub-processors to deliver our Services:
| Category | Purpose | Location |
|---|---|---|
| Cloud Infrastructure | Hosting and compute resources | United States |
| Payment Processing | Billing and payments | United States |
| Email Services (Resend) | Transactional and marketing emails | United States |
| Analytics (Google Analytics) | Usage analytics and reporting | United States |
| Customer Support | Help desk and support tickets | United States |
| Authentication | User identity management | United States |
All sub-processors are bound by data processing agreements that require them to protect your information in accordance with applicable law and this Privacy Policy.