Privacy Policy

1. Who we are

Authority13 is operated by AI Code Agency Pvt Ltd, Sri Lanka (aicodeagency@gmail.com). We build AI-powered operating systems for startup founders.

2. Data we collect

• Account info: name, email, GitHub profile (via OAuth)
• Business data: revenue events, vendor info, tasks you submit
• AI interactions: CEO chat history (90-day retention, encrypted)
• Usage events: which features you use (for product improvement only)
• Telegram chat ID (if you connect the bot)

3. How we use it

• To provide AI agent services and recommendations
• To send daily briefs and approval requests via Telegram
• To improve our AI models and product features
• We do NOT sell your data to third parties
• We do NOT use your data to train AI models without consent

4. Third-party services

We use: Anthropic Claude (AI processing), Supabase (database), Vercel (hosting), Upstash (Redis), Telegram (messaging). Each has their own privacy policy.

AI processing in detail. To generate drafts, plans and recommendations, the business content you give us — chat messages, uploaded documents, company and task details, and the business memory built from them — is sent to Anthropic (Claude) for processing. It is collected only when you type it, upload it, or ask an agent to act. Anthropic processes this data solely to return the result to you, under terms that provide protection equivalent to this policy, and does not use it to train its models. This data is never sold, never shared for advertising, and is not sent to any other AI provider. You consent to this processing when you sign in, and you can withdraw it by deleting your workspace or emailing aicodeagency@gmail.com.

5. Your rights (GDPR)

• Access your data — export via Settings → Privacy
• Delete your data — request via Settings → Privacy or data deletion page
• Rectification — update via Settings
• Portability — JSON export available
• Object to processing — contact us

6. Data retention

Account data is kept while your account is active. CEO chat history is deleted after 90 days. After account deletion, all data is removed within 30 days.

7. Security

All data is encrypted in transit (TLS) and at rest. We use row-level security on our database. API keys are never stored in plaintext.

8. Contact

Privacy questions: aicodeagency@gmail.com