Skip to main content

Privacy Policy

Effective: March 12, 2026 — Last updated: March 15, 2026

1. Introduction

SoundsWire LLC (“we”, “us”, or “our”) operates the platform available at agenticrelay.app (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our Service.

By accessing or using the Service you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Information You Provide Directly

  • Account registration data (name, email address, password)
  • Workspace and organization details
  • Billing and payment information (processed by our payment processor, Stripe; we do not store full card numbers)
  • Content you upload or create (knowledge base documents, agent configurations, conversation logs)
  • Communications you send to us (support requests, feedback)

2.2 Information Collected Automatically

  • Log data: IP address, browser type and version, pages visited, timestamps, referring URLs
  • Device information: hardware model, operating system, unique device identifiers
  • Usage data: features used, queries processed, API call counts, error logs
  • Cookies and similar tracking technologies (see Section 7)

2.3 Information from Third Parties

  • OAuth data when you sign in via a third-party identity provider (e.g., Google)
  • Payment and fraud-prevention signals from Stripe
  • Analytics signals from Cloudflare and similar infrastructure providers

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve the Service
  • Create and manage your account
  • Process payments and manage subscriptions
  • Send transactional communications (account confirmations, invoices, security alerts)
  • Respond to support requests and inquiries
  • Enforce our Terms of Use and detect abuse, fraud, or security incidents
  • Comply with applicable laws and legal obligations
  • Send product updates or marketing communications (with your consent where required by law)
  • Perform analytics and improve the user experience (with your consent)

We do not sell, rent, or trade your personal data to third parties for their marketing purposes. We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Legal Bases for Processing (EEA / UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom, our legal bases for processing your personal data under the General Data Protection Regulation (GDPR) and UK GDPR are:

  • Contract performance — to provide the Service you have signed up for
  • Legitimate interests — to operate, improve, and secure the Service, and to communicate with you
  • Legal obligation — to comply with applicable laws (e.g., tax, fraud prevention)
  • Consent — for marketing communications and non-essential cookies, where required

5. How We Share Your Information

We may share your information with:

  • Infrastructure and hostingCloudflare (hosting, CDN, DDoS protection, Workers). Cloudflare may process HTTP request data (IP address, user agent, referrer, request path) for network security and performance purposes. We have a Data Processing Agreement with Cloudflare compliant with GDPR Article 28. Cloudflare's privacy policy: cloudflare.com/privacypolicy.
  • PaymentsStripe processes all payment transactions. We do not store full card numbers; Stripe is PCI-DSS Level 1 certified. We have a Data Processing Agreement with Stripe covering GDPR Article 28 requirements. Stripe's privacy policy: stripe.com/privacy.
  • Error monitoringSentry receives anonymized error and performance traces. Personal data in stack traces is scrubbed before transmission where technically feasible.
  • Email delivery — Transactional and notification emails are delivered via a third-party email provider bound by a Data Processing Agreement.
  • AI model providers — when you use AI features, prompts and knowledge base content may be processed by one or more of the following providers depending on the model selected: Cloudflare Workers AI, OpenAI, Anthropic, Google (Gemini), xAI, DeepSeek, Perplexity, Cohere, Deepgram, and Cartesia. Each provider operates under its own terms of service, content policy, and data processing agreement. We process data under those agreements and do not permit providers to train on your data except as expressly required for service delivery.
  • AnalyticsGoogle Analytics 4 (analytics cookies, only with your consent — see Section 7).
  • Legal requirements — when required by law, court order, or governmental authority, or to protect the rights, property, or safety of SoundsWire LLC, our users, or the public.
  • Business transfers — in connection with a merger, acquisition, or sale of all or a portion of our assets, subject to standard confidentiality obligations.

6. Data Retention

We retain personal data only as long as necessary for the purpose it was collected, or as required by law.

Data CategoryRetention PeriodNotes
Account registration dataDuration of account + 90 days after deletionDeleted or anonymized within 90 days of account closure
Conversation logsDuration of subscriptionDeletable by user at any time from the dashboard; removed within 90 days of account deletion
Uploaded documents (knowledge base)Duration of subscriptionDeletable by user at any time from the dashboard
Payment and billing records7 yearsRequired by tax and financial regulations
Server / infrastructure access logsUp to 30 daysRetained by Cloudflare for security and abuse prevention; automatically purged
Error and performance traces (Sentry)90 daysAutomatically purged per Sentry data retention settings
Analytics data (Google Analytics)14 months (GA4 default)Only collected with your consent; configurable in GA4
Support communications3 yearsRetained to provide context for follow-up support and abuse prevention

7. Cookies and Tracking Technologies

7.1 Cookie categories

  • Essential cookies — required for authentication and core functionality (e.g., session tokens). These are set automatically and cannot be disabled without impairing the Service.
  • Analytics cookies — collect anonymized, aggregated data about how visitors use the marketing website via Google Analytics 4. These are only set after you explicitly accept via the consent banner.
  • Preference cookies — stored in your browser's localStorage (not transmitted to servers) to remember settings such as theme preference (dark / light mode) and your cookie consent choice (ar_cookie_consent).

7.2 Google Analytics 4 cookies (analytics only — consent required)

We use Google Analytics 4 with Consent Mode v2. Analytics cookies are blocked by default until you accept. When you accept, the following cookies may be set by Google:

CookieProviderDurationPurpose
_gaGoogle2 yearsAssigns a unique ID to distinguish users for analytics aggregation
_ga_G-4ZTSS1CRRGGoogle2 yearsPersists session state for this Google Analytics property

Google Analytics uses these cookies to measure page views, session duration, scroll depth, and outbound clicks in aggregate. No personally identifiable information (PII) is sent to Google. Full details are available in Google's Privacy Policy.

7.3 Managing your consent

When you first visit our marketing site, a consent banner is displayed. Analytics cookies are blocked by default (Consent Mode v2 default-deny) — none are set until you explicitly click “Accept all” or enable the Analytics category in “Manage preferences.” Your choice is saved in your browser's localStorage under the key ar_cookie_consent and expires after 12 months, after which you will be prompted again.

You can withdraw or change your consent at any time by clicking Cookie Preferences in the footer of any page on this site — the same number of clicks as giving consent (GDPR Art. 7(3)). When you reject or remove analytics consent, any analytics cookies already set are immediately deleted. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Global Privacy Control (GPC): If your browser transmits a GPC opt-out signal (navigator.globalPrivacyControl = true), we automatically treat this as a CCPA/CPRA opt-out and do not activate analytics cookies, without requiring any additional action from you.

You may also disable or delete cookies through your browser's settings. Disabling essential cookies may impair the functionality of the Service.

We do not use advertising, retargeting, or cross-site tracking cookies.

8. Data Security

We implement industry-standard technical and organizational measures to protect your data, including:

  • Encryption in transit (TLS 1.2+) and at rest (AES-256)
  • API keys encrypted using AES-256-GCM before storage
  • Access controls and least-privilege principles for internal systems
  • Regular security reviews and dependency audits

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at support@agenticrelay.app.

9. Your Rights

All users

  • Access and export the data associated with your account
  • Correct inaccurate personal data
  • Delete your account and associated personal data
  • Opt out of marketing emails at any time via the unsubscribe link

EEA / UK users (GDPR / UK GDPR)

  • Right to access (Article 15 GDPR)
  • Right to rectification (Article 16)
  • Right to erasure / “right to be forgotten” (Article 17)
  • Right to restriction of processing (Article 18)
  • Right to data portability (Article 20)
  • Right to object to processing (Article 21)
  • Right to withdraw consent at any time without affecting prior lawful processing

California users (CCPA / CPRA)

  • Right to know what personal information is collected
  • Right to delete personal information
  • Right to opt out of the sale or sharing of personal information (we do not sell personal information)
  • Right to non-discrimination for exercising your rights

To exercise any of these rights, contact us at legal@agenticrelay.app. We will respond within 30 days (or the period required by applicable law).

10. International Data Transfers

SoundsWire LLC operates globally and may transfer your personal data to countries outside your country of residence, including the United States.

When we transfer data from the EEA or UK to the United States, we rely on one or more of the following safeguards:

  • EU-US Data Privacy Framework (DPF) — the adequacy decision issued by the European Commission on 10 July 2023. Where a sub-processor participates in the DPF (e.g., Google LLC), no additional transfer mechanism is required.
  • Standard Contractual Clauses (SCCs) — the 2021 SCCs approved by the European Commission (Implementing Decision 2021/914), incorporated into our Data Processing Agreements with processors not covered by the DPF.
  • UK IDTA — the UK International Data Transfer Agreement for transfers from the United Kingdom.

You may request a copy of the applicable transfer safeguards by contacting us at legal@agenticrelay.app.

11. Children's Privacy

The Service is not directed to children under 16 years of age (or 13 in jurisdictions where that age applies). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at legal@agenticrelay.app and we will promptly delete such information.

12. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. For material changes, we will notify you via email or a prominent notice on the Service at least 30 days before the change takes effect. Your continued use of the Service after the effective date constitutes acceptance of the revised policy.

14. Do Not Sell or Share My Personal Information (California Residents)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the right to opt out of the “sale” or “sharing” of their personal information.

SoundsWire LLC does not sell, rent, trade, or share your personal information with third parties for their own marketing or advertising purposes. We share data only with service providers acting on our behalf (as described in Section 5) and with Google Analytics solely to measure aggregate website traffic (with your consent).

To exercise your right to opt out of analytics sharing, click Cookie Preferences in the footer and select “Decline.” For all other CCPA/CPRA rights (access, deletion, correction, non-discrimination), contact us at legal@agenticrelay.app.

15. Automated Decision-Making

SoundsWire LLC does not use automated decision-making processes, including profiling, that produce legal or similarly significant effects on individuals. AI features within the Service generate responses to user-submitted queries but do not make autonomous decisions about users' access, creditworthiness, employment, or similar matters.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

SoundsWire LLC

Privacy / Legal: legal@agenticrelay.app

General support: support@agenticrelay.app

Website: agenticrelay.app