Privacy Policy
Effective Date: July 31, 2026
1. Introduction
This Privacy Policy is issued by BirunAI ("BirunAI," "we," "us," or "our"). BirunAI provides an intelligent AI Agent platform, web application, and related software, integrations, and documentation (collectively, the "Service") designed to orchestrate automated workflows across your connected toolkits (such as GitHub, Slack, Google Workspace, etc.) using artificial intelligence ("AI").
This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you use the Service, and outlines your rights and choices. By using the Service, you agree to the practices described in this Privacy Policy.
Key Definition
Customer Data means data submitted to or processed by the Service on your behalf, including: connection credentials (e.g., OAuth tokens), basic user identifiers, workspace settings, uploaded files, conversation threads, outputs generated in BirunAI, automations (trigger-based reactions and workflows), and execution logs.
2. Information We Collect
We collect only the information necessary to provide, maintain, and secure the Service.
A. Account & Authentication Information
When you sign up or log in via Auth0 or third-party identity providers, we collect account details such as your email address, user ID, full name, and profile picture.
B. Connection Credentials
We store credentials necessary to maintain integrations via Composio, including OAuth tokens (access/refresh tokens), token scopes, and expiration metadata for the third-party integrations you explicitly enable.
C. Content & Records Inside BirunAI
We store content needed to provide continuity and run the Service, including:
- Conversation threads, messages, and in-chat integration toggle states.
- Session execution mode settings (Safe Mode vs. Act Mode preferences).
- Automation configurations, target execution app choices, and custom schemas.
- Action AI instructions and execution logs for single-app workflows.
- Uploaded files and generated media (stored securely in Cloudflare R2).
D. Service Logs & Usage Data
We automatically collect operational telemetry, including timestamps, token counts, IP addresses, browser agent metadata, and performance logs to monitor system stability and enforce plan quotas.
3. How We Use Your Information
We use collected information strictly to:
- Provide and Operate the Service: Authenticate users, maintain connected integrations, and execute automated tasks and trigger reactions.
- AI Processing: Process prompts to produce responses and media at your direction.
- No Advertising / No Training: We do not use Customer Data for advertising. We do not train our own or third-party foundation models on Customer Data.
- Security & Protection: Detect and prevent fraud, abuse, and unauthorized access.
4. How We Disclose or Share Information
We do not sell your personal data. We share information only with trusted infrastructure providers (subprocessors) required to operate the Service:
| Subprocessor | Purpose / Service | Data Processed |
|---|---|---|
| Auth0 | Identity & Authentication | Account email, name, user ID |
| Polar.sh | Billing & Payment Processing | Subscription & transaction metadata |
| Cloudflare | Edge Network, Database & R2 Storage | Logs, files, generated images |
| Composio | Integration Connectivity Platform | OAuth credentials & integration tokens |
| AI Providers (e.g., OpenAI, Anthropic) | Model Inference & Generation | Prompts and execution context. (Data sent via Enterprise APIs is strictly NOT used for model training). |
5. Data Security & Storage
We maintain industry-standard technical safeguards to protect Customer Data:
- Encryption in Transit: All web traffic is encrypted using TLS 1.2+ / TLS 1.3.
- Encryption at Rest: Data stored in Cloudflare D1 and R2 is encrypted at rest using AES-256.
- Access Controls: Strict role-based access controls (RBAC) and scoped token authorization.
6. Your Rights & Data Control
You maintain direct control over your content and personal data:
- Direct Data Deletion: You can directly delete your conversation threads, execution logs, automation workflows, and uploaded files directly within the application at any time. Deleted items are permanently removed from active storage immediately.
- Revoke Integrations: You can disconnect third-party toolkits directly from the platform, which immediately revokes access and halts data retrieval.
- Account Deletion: Account deletion can be requested by contacting support. Upon receiving your request, your account and associated records will be deleted promptly without unnecessary delay.
7. Contact Us
If you have any questions or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: support@birunai.com
Website: https://birunai.com