Privacy Policy

At Ignite, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI agent builder platform. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the platform.

1. Data Controller Information

2. Information We Collect

Personal Information

We collect information that you provide directly to us when you:

• Create an account: Name, email address, password (encrypted)
• Use Google OAuth: Email, name, profile picture from your Google account
• Subscribe to a plan: Billing information (processed by Stripe)
• Contact us: Any information you provide in your communications

Usage Data

• AI agents you create (names, descriptions, system prompts, configurations)
• Conversations and messages sent through your agents
• Files you upload (PDFs, DOCX, text files for knowledge bases)
• API keys you provide (OpenRouter, OpenAI - encrypted before storage)
• AI models you select for your agents

Technical Information

• Authentication cookies (HTTP-only, secure)
• Email verification status
• Login timestamps and session data
• IP address (for security purposes)

Payment Information

• Stripe Customer ID (links your account to Stripe)
• Subscription tier (Starter or Pro)
• Subscription status and renewal dates
• Note: Payment card details are processed and stored exclusively by Stripe. We never see or store your full card number.

3. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

4. How We Use Your Data

• Service Delivery: Create and manage your AI agents, process conversations, store knowledge bases
• Payment Processing: Manage subscriptions, process payments via Stripe
• Authentication: Verify your identity, maintain secure sessions
• Email Communications: Send verification emails, transactional notifications (via Resend)
• AI Processing: Route your conversations to OpenRouter/OpenAI using your encrypted API keys
• Security: Detect fraud, prevent abuse, protect against security threats
• Compliance: Meet legal and regulatory requirements
• Service Improvement: Analyze usage patterns to improve platform features

5. Third-Party Data Processors

We share your data with the following trusted third parties to operate our service:

6. International Data Transfers

Ignite is based in Argentina. Your data may be transferred to and processed in countries outside Argentina, including the United States, where our third-party service providers operate.

When we transfer personal data outside Argentina or the European Economic Area (EEA), we ensure adequate safeguards are in place:

• Standard Contractual Clauses (SCCs): EU-approved contracts ensuring GDPR-level protection
• Adequacy Decisions: Transfers to countries deemed adequate by EU Commission
• Service Provider Commitments: Stripe, Supabase, Vercel provide GDPR-compliant data protection

7. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations:

Note: When you delete your account, we permanently remove your personal data within 30 days, except where retention is required by law (e.g., financial records for tax purposes).

8. Your Privacy Rights

GDPR Rights (EU Users)

If you are located in the European Union, you have the following rights under GDPR:

Argentina PDPA Rights (Law 25,326)

If you are located in Argentina, you have the following rights:

• Right to Access: Request information about your personal data held by Ignite
• Right to Rectification: Update or correct inaccurate personal data
• Right to Deletion: Request deletion of your personal data
• Right to Object: Object to certain processing activities
• Right to File a Complaint: Lodge a complaint with the National Directorate for Personal Data Protection (DNPDP) at www.argentina.gob.ar/aaip

How to Exercise Your Rights

To exercise any of these rights, please contact the developer:

9. Security Measures

We implement industry-standard security measures to protect your personal data:

Note: While we implement robust security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but we continually work to protect your data.

10. Cookies We Use

Ignite uses cookies to maintain your authenticated session. For detailed information, see our Cookie Policy.

We do not currently use analytics or marketing cookies. If we introduce them in the future, we will update this policy and request your consent.

11. Children's Privacy

Ignite is not intended for use by children under the age of 18. We do not knowingly collect personal data from children under 18.

If you are a parent or guardian and believe your child has provided us with personal data, please contact the developer through www.ignite.ar. We will delete such information from our systems within 30 days.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email (to the email address on your account)
• Provide a prominent notice on the platform

Your continued use of Ignite after changes become effective constitutes acceptance of the revised Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. Data Protection Authorities