Legal

Privacy Policy

Last updated: 2026-06-25

This describes how user data is handled within the Service.

01Information We Collect

Account information: the email address used for authentication, and identifiers for session management.

User content: Objectives, plans, experiment logs, decision records, and similar data entered by the user.

Payment information: information related to subscriptions and credit purchases. Payment methods such as card numbers are processed by Stripe and are not retained by the Company.

Usage logs: technical logs (such as request information) used for troubleshooting, fraud detection, and service improvement.

02Purposes of Use

We use the collected information to provide, maintain, and improve the Service, for authentication and session management, billing processing, troubleshooting and security, and to fulfill legal obligations.

03Transmission to AI Models

To generate structuring, suggestions, summaries, and the like, the Service may transmit portions of user content to providers of large language models (LLM providers).

We endeavor to require, as a contractual or configuration condition, that the receiving providers do not use such data to train their own models.

04Disclosure to and Engagement of Third Parties

To the extent necessary to operate the Service, the Company entrusts data processing to external service providers such as authentication infrastructure, databases, payments, and LLMs (e.g., Stripe, database and infrastructure providers, and LLM providers).

Except as required by law, we do not provide personal information to third parties without the user's consent.

05Data Storage and Protection

Collected information is stored under appropriate access controls. Database access is limited to the server side and operated on the premise of row-level permission separation.

Communications are encrypted, and stored data is subject to the necessary access controls.

06Retention Period

User content is retained while the account is active and for any period required by law or legitimate business need. After account deletion, it is deleted or anonymized within a reasonable period.

07User Rights

Users may request the disclosure, correction, deletion, or suspension of use of their personal information. If you wish to do so, please contact us at the contact address.

08Cookies and Similar Technologies

The Service uses cookies and similar technologies to the extent necessary to maintain authentication sessions. These are required for the basic operation of the Service.

09Changes to This Policy

The Company may revise this Policy as necessary. Material changes will be announced within the Service.

Questions about this document? Contact support@behavior.run.