Privacy Policy

1. Information we collect

Account information: your name, email address and profile picture from Google sign-in, and the workspace and billing details you provide.

Your Content: the databases, files, queue messages, memories and secrets your agents store in Primitives Cloud.

Usage and audit data: operation counts, storage used, and audit log entries such as writes, queue state changes and secret uses, used for metering, billing and your audit trail.

Contact requests: the name, email, company and message you submit through our contact form.

Product analytics: in the dashboard, the pages you visit, the clicks you make and the actions you take, such as creating a workspace, a group, a primitive or an API key, linked to your account and workspace. We record which page you are on but not query strings, invitation links, on-screen text or the values you copy, so it never includes your API keys or Your Content.

2. How we use information

To provide, secure and support the Services; to meter usage and bill you; to communicate with you about your account and changes to the Services; and to comply with legal obligations.

We process Your Content only to provide the Services to you. We do not use it to train AI models.

3. Secrets

Secrets are encrypted at rest with per-group envelope encryption, and the encryption key is stored separately from your data. The API and MCP never return secret values: they are injected into the outbound requests your grants allow and redacted from responses.

4. Self-hosted and local use

When you run the open-source engine yourself, with primitives dev or on your own infrastructure, your data stays there. The engine sends no telemetry or content to us.

5. Cookies and analytics

This website does not use analytics or advertising cookies.

The dashboard uses cookies to keep you signed in, and cookies and local storage for product analytics with PostHog, so we can see which features are used and where people get stuck. We do not record your sessions or use analytics for advertising.

The hosted API and MCP server report only when a group or primitive is created, attributed to your workspace, not to a person. Usage metering stays in our own database.

6. Sharing

We do not sell your personal information. We share information only with service providers that help us run the Services, such as hosting, payment processing, email and product analytics (PostHog, in the United States), under obligations to protect it, or when required by law.

7. Retention

Your Content is kept until you delete it or close your workspace, then deleted after the export window described in our Terms. Audit log entries are kept for the period your plan includes.

Account and billing records are kept while your account is active and afterwards as long as needed to meet legal and accounting obligations.

8. Security

We use technical and organizational measures to protect the information we hold, including isolation between groups, scoped API keys and expiring access tokens, and encryption of secrets. No method of transmission or storage is completely secure.

9. Your rights

Depending on where you live, you may have rights to access, correct, export or delete your personal information, or to object to how we use it. Email us to exercise them.

10. Changes

We may update this policy from time to time. Material changes will be posted here with a new date.

11. Contact

Privacy questions can be sent to hi@useprimitives.com.