Privacy Policy

Introduction

SuprAgent ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered platform and services.

We are GDPR compliant and take data protection seriously. By using our services, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide

• Account information (name, email, company name)
• Communication data (messages, support tickets)
• Payment information (processed securely through third-party providers)
• Configuration data for your AI agents

Information Collected Automatically

• Usage data (how you interact with our services)
• Device and browser information
• IP address and location data
• Cookies and similar tracking technologies

Browser Extension & On-Page Data

SuprAgent offers a Chrome browser extension that a signed-in user uses to build and configure their app agents and to run a configured agent (the "app agent") on a website they choose. When you activate the extension on a page:

• We process the content of that page (text, form fields, page structure, and the elements the agent needs to read or interact with) so the agent can understand the page and perform the tasks you ask of it.
• We transmit the relevant page context and your instructions to SuprAgent's backend to operate the agent during your session.
• In "configure" mode, we record the structure of the site you are setting up (its pages and routes, navigation paths, and the actions performed) to build and improve your agent's configuration.
• The extension stores authentication tokens and your chosen agent and site pairings locally on your device, in the browser's extension storage. It does not run, read page content, or send any data until you sign in and explicitly click "Run on this page."
• The extension only communicates with SuprAgent's own services (api.supragent.ai and app.supragent.ai).

You choose where to run the agent. A website you run it on may display personal or sensitive information, and the agent may process that content to carry out your request. We process such page content only to perform the task you ask of it. For certain sensitive steps (for example file uploads, CAPTCHAs, and biometric or identity verification), the agent prompts you to complete the step yourself rather than performing it automatically.

Voice & Audio

• If you use voice features ("Talk"), we capture audio from your microphone while you are speaking to the agent and send it to be transcribed into text so the agent can act on it. The agent may also return synthesized speech (text-to-speech) responses.
• Microphone capture only occurs while the voice feature is actively in use.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent security incidents
• Personalize and improve your experience
• Operate your agent: interpret your instructions (typed or spoken), understand the page you are on, and carry out the actions you request
• Transcribe voice input and generate spoken responses
• Provide, maintain, secure, and improve the agent and its configuration

Data Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

• Service Providers: With third parties who perform services on our behalf
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you have given us permission to share

To operate the agent, we use trusted third-party service providers ("subprocessors") to process certain data on our behalf, including speech-to-text transcription, text-to-speech synthesis, and large language model processing that powers the agent. These providers process data only to provide their service to us and are not permitted to use it for their own purposes. We do not sell your personal information.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication requirements
• Employee training on data protection

Your Rights (GDPR)

Under GDPR and applicable data protection laws, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data
• Restriction: Request limitation of processing
• Portability: Receive your data in a structured format
• Object: Object to processing of your data
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us at privacy@supragent.ai.

Your Controls

You can stop data collection at any time by ending your session, logging out (which clears the authentication tokens stored on your device), or removing the extension from your browser. The rights described above apply to data collected through the browser extension and voice features, just as they do to other personal data we hold.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. When we no longer need your data, we will securely delete or anonymize it.

This includes data from agent sessions, such as page context, voice audio, and transcripts. We retain this data only for as long as needed to operate the agent, secure and improve the service, and meet our legal obligations, after which we delete or anonymize it. Voice audio is used to produce a transcript and is not kept longer than necessary for that purpose.

Cookies

We use cookies and similar tracking technologies to track activity on our service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, some features of our service may not function properly without cookies.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.