Privacy policy.

1. Who We Are

Agents by devtable is an AI agent platform operated by devtable (“we,” “us,” or “our”). We help businesses deploy AI-powered chat agents to answer customer questions, capture leads, and book appointments. Our platform is accessible at agents.devtable.co.

For privacy-related inquiries, contact us at: support@devtable.co

2. Information We Collect

Account Information: When you register, we collect your name, email address, and a hashed version of your password. We never store your password in plain text.

Business Information: Information you voluntarily provide about your business, including name, phone number, email, address, hours of operation, and a business description.

Uploaded Documents: Files you upload to train your agents (PDFs, text files, etc.). These are processed to extract text and generate vector embeddings stored in our database.

Conversation Data: Messages exchanged between your deployed agents and your customers, including any contact information customers voluntarily provide.

Usage Data: Information about how you use the platform, including pages visited, features used, and API calls made.

Billing Information: Payment details are processed directly by Stripe. We do not store credit card numbers. We retain records of transactions, subscription status, and billing history.

3. How We Use Your Information

• To provide and operate the platform
• To train and power your AI agents using the content you upload
• To send transactional emails (booking alerts, lead notifications, password resets)
• To process payments and manage your subscription
• To improve our services and fix bugs
• To comply with legal obligations

We do not sell your data. We do not use your data for advertising.

4. Third-Party Services

We share data with the following third parties as required to operate the platform:

• Anthropic — processes conversation messages to generate AI responses. Subject to Anthropic's Privacy Policy.
• OpenAI — processes document content to generate vector embeddings for knowledge retrieval. Subject to OpenAI's Privacy Policy.
• Stripe — processes all payments and subscription billing. Subject to Stripe's Privacy Policy.
• Resend — delivers transactional emails on our behalf.
• Vercel — hosts the application infrastructure.
• MongoDB Atlas — stores all application data in encrypted databases.
• Upstash — provides Redis-based job queuing and rate limiting.

5. Data Retention

Different categories of data have different retention windows:

• Chat conversations and messages: automatically deleted 365 days after the most recent activity in the conversation. This includes message content, conversation timestamps, and visitor metadata (IP address, approximate geographic region, browser/device, referrer, UTM parameters) we recorded for that conversation.
• Pipeline traces and error logs: retained for 30 days for operational debugging, then automatically deleted.
• Account, workspace, agent configuration, and knowledge base content: retained for as long as the account is active. You control this directly through the dashboard (create, edit, delete).
• Bookings, leads, and analytics aggregates: retained for the life of the workspace. These are first-party business records you may need for accounting, customer-relationship management, or audit.
• Billing records: retained as required by tax law (typically 7 years in the US).

If you request account deletion, your account-level data is scheduled for permanent removal within 30 days and chat data is removed immediately. To request earlier deletion of specific conversations, contact us through the account settings page.

6. Cookies

We use session cookies to keep you logged in. We do not use tracking cookies or advertising cookies. No cookie banner is required because we do not engage in cross-site tracking.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request permanent deletion of your account and data (GDPR Article 17)
• Portability: Request an export of your data in a machine-readable format
• Objection: Object to certain types of processing

To exercise any of these rights, email support@devtable.co. We will respond within 30 days.

8. California Residents (CCPA)

California residents have the right to know what personal information we collect, request deletion of their data, and opt out of the sale of personal information. We do not sell personal information. To make a CCPA request, email support@devtable.co.

9. Security

We use industry-standard security practices including encrypted connections (HTTPS), hashed passwords, and encrypted storage of sensitive credentials. No system is perfectly secure — if you believe your account has been compromised, contact us immediately.

10. Children

This service is not directed at children under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a notice on the platform. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact

For any privacy-related questions or requests: support@devtable.co