Privacy Policy

This Privacy Policy explains how Cleo Agent ("we", "us", or "our"), a product of Huminary Labs, collects, uses, discloses, and safeguards your information when you use our application, websites, and related services (collectively, the "Services"). We are committed to protecting your privacy and handling your data responsibly.

Who We Are

Cleo Agent helps you work with AI agents and tools. The Services are developed and operated by Huminary Labs. For privacy inquiries, contact us at legal@huminarylabs.com.

Information We Collect

• Account and Profile Information: name, email, authentication identifiers, and preferences if you create an account or sign in.
• Usage Data: interactions with the app (e.g., messages to agents, features used, settings), device information, app version, and diagnostic logs.
• Content You Provide: prompts, messages, files, task details, and other inputs you choose to share with agents or tools.
• Push Notification Data: your browser/device push subscription (e.g., endpoint and keys) if you opt in. We use standard Web Push technology with VAPID keys.
• Cookies and Local Storage: we may use cookies and similar storage (e.g., localStorage, IndexedDB, service workers) for authentication, session continuity, preferences, and offline/PWA features.
• Third-Party Services: we rely on providers such as Supabase (database/auth), Vercel (hosting/deployment), and others to operate the Services. These providers may process limited personal data on our behalf as processors or sub-processors.

How We Use Information

• Provide, maintain, and improve the Services and features.
• Authenticate users and secure accounts.
• Send service communications and optional push notifications.
• Understand usage to enhance performance and reliability.
• Comply with legal obligations and enforce our Terms.
• Prevent fraud, abuse, and security incidents.

Legal Bases (EEA/UK)

Where GDPR or UK GDPR applies, we process data under these legal bases: (i) performance of a contract (to provide the Services); (ii) legitimate interests (e.g., security, service improvement) balanced against your rights; (iii) consent (e.g., for optional push notifications or certain cookies); and (iv) legal obligations.

Sharing of Information

We do not sell personal information. We share data only as necessary to provide the Services, including with:

• Service Providers/Processors: e.g., Supabase, Vercel, and other infrastructure, analytics, or communications vendors under agreements that require appropriate safeguards.
• Integrations You Authorize: when you connect third-party accounts or tools, we share data as needed to perform the integration you request.
• Legal and Safety: to comply with law, respond to lawful requests, or protect rights, property, users, or the public.
• Business Transfers: in a merger, acquisition, financing, or sale of assets, data may be transferred consistent with this Policy.

Data Retention

We retain personal data for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and purpose.

International Transfers

We may process and store information in countries other than your own. Where required, we implement appropriate safeguards for international data transfers, such as contractual clauses, and take steps to ensure your data receives a comparable level of protection.

Security

We use reasonable technical and organizational measures designed to protect information from unauthorized access, loss, misuse, or alteration. No method of transmission or storage is fully secure; we cannot guarantee absolute security.

Your Rights

Depending on your location, you may have rights such as access, correction, deletion, portability, and objection to certain processing. To exercise rights or make a request, contact us atlegal@huminarylabs.com.

California residents (CCPA/CPRA) may have additional rights regarding access, deletion, correction, and opting out of certain sharing.

Children’s Privacy

The Services are not directed to children under the age required by applicable law (e.g., 13 in the U.S., 16 in parts of the EEA). We do not knowingly collect personal information from children.

Third-Party Links

Our Services may link to third-party sites or services. This Policy does not apply to those third parties. Please review their privacy policies.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a revised “Last Updated” date. Material changes may be communicated by additional notice.

Contact Us

Questions or concerns? Email legal@huminarylabs.com orsupport@cleo-agent.com.