Privacy Policy

1. Information we collect

We collect what we need to run your account and your agents. That falls into a few groups:

• Account details: your name, email address, password, plan and any licence code you redeem.
• What you give agents: your messages, each agent's name and instructions, images you attach, and the agents' replies.
• Workspace data: the lists, leads, companies, deals, tasks, appointments, campaigns and funnels you or your agents create, including the contact details of the people in them.
• Connected accounts: the credentials you add for connectors, such as OAuth grants, API keys, SMTP details, Twilio credentials and your own AI keys.
• Channel data: messages you send your agent over WhatsApp, Telegram or the browser extension, plus a label or masked number for each link and when it was last used.
• Usage data: tokens used per chat turn, send and block counts, and technical logs such as IP address, browser and timestamps.
• Funnel analytics: when people visit funnels you publish, we record events such as views and clicks with their country, city, browser, operating system, device type and referrer.

2. How we use it

• To provide the service: run your agents and their tools, send what you ask them to send, and show your Records.
• To secure your account: verify your email, send password reset codes and detect abuse.
• To apply your plan: count tokens and allowances and show your usage.
• To support you when you contact us, and to tell you about important changes to the service.
• To understand and improve how the product is used, using aggregated or de-identified data where we can.

We don't sell your personal information, and we don't use your workspace data to advertise to you or to the people in your lists.

3. AI processing and model providers

Agents are powered by third-party AI models. When you send a message, we send the model provider for that agent's model what it needs to respond: your message, the agent's instructions, earlier messages in the conversation, and the results of any tools the agent uses, which can include workspace data.

• Providers: Anthropic (Claude models), OpenAI (GPT models) and Google (Gemini models), depending on the model you choose.
• Your own AI key: if you add one, requests for that provider are made with your key, and that provider's terms with you also apply.
• Provider handling: each provider processes this data under its own API terms, which set how long it keeps the data and whether it may be used for training.

4. Sharing and subprocessors

We share data only with the service providers that help us run Dexisphere, with services you connect, or when the law requires it.

We may also disclose information to comply with the law, to protect people's safety or our rights, or as part of a merger or acquisition, in which case this policy continues to apply.

5. Data retention

• Account details are kept while your account is open.
• An agent's instructions, conversation and channel links are kept until you delete the agent.
• Workspace records are kept until you delete them or close your account.
• Work receipts aren't stored: they exist only in your browser for the current session.
• Channel pairing codes expire after 15 minutes. Unused conversation copies are removed automatically.
• After you close your account, we delete or anonymise your data within 30 days, except where we must keep it longer for legal, tax or security reasons. Backups roll off on their normal schedule.

6. Security

• Data travels over encrypted HTTPS connections between your browser, the app and our providers.
• Connector credentials are stored on the server and used by your agents' tools. They aren't shown back in chat.
• Access to production data is limited to the people who need it to run and support the service.
• Your session is a sign-in token kept in your browser. Signing out removes it from that browser.

No system is completely secure. Use a strong, unique password, sign out on shared devices, and tell us at privacy@dexisphere.com if you believe your account or data has been compromised.

7. International transfers

We and our providers operate in several countries, including the United States, so your information may be processed outside the country where you live. Where the law requires it, we rely on appropriate safeguards for these transfers, such as standard contractual clauses.

8. Your rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you, and get a copy in a portable format;
• correct information that's wrong, or delete it;
• object to or restrict certain processing, and withdraw consent where we rely on it;
• complain to your local data protection authority.

Much of this you can do yourself: edit or delete agents, disconnect channels and connectors, and delete records. For anything else, email privacy@dexisphere.com from the address on your account. We'll respond within the time the law allows.

9. Cookies and local storage

We keep browser storage to the minimum the site and app need. We don't use advertising cookies.

You can clear these at any time in your browser settings. Clearing the app's storage signs you out. If we add analytics or other cookies, we'll update this section first.

10. Changes and contact

We may update this policy as the product changes. We'll change the "Last updated" date above, and for significant changes we'll let you know by email or in the app before they take effect.

Questions, requests or complaints about privacy: privacy@dexisphere.com. For help with your account, email support@dexisphere.com.