Privacy policy

Piolet is operated and billed by ALPN Digital Ltd, a company registered in England and Wales. ALPN Digital Ltd is the data controller for the personal data described on this page. Contact details will be listed here once the policy is finalised.

• Account data: name, work email, password hash, organisation and workspace names.
• Billing data: plan, invoices and the last four digits of your card. Card numbers are held by Stripe, not by us.
• Connection data: OAuth tokens and API keys for the tools you connect, encrypted at rest and scoped to one workspace.
• Agent run data: inputs an agent read from your connected tools, outputs it produced, approvals and costs.
• Site data: pages visited, referrer and UTM parameters when you sign up to a form, and standard server logs.

• To run the service you signed up for, including agent runs and the approvals inbox (contract).
• To bill you and keep accounting records (contract and legal obligation).
• To send product and pricing updates you asked for, with one-click unsubscribe (consent).
• To secure the platform, investigate abuse and improve reliability (legitimate interest).

Agent runs send the content needed for the task to large language model providers under terms that prohibit training on your data. A full list of sub-processors, their regions and their purpose will be published with the data processing agreement.

Account and workspace data is kept while your account is active and deleted within 30 days of a deletion request. Run history is kept for the life of the workspace so approvals can be audited. Connection tokens are deleted the moment you disconnect a tool.

You can access, correct, export or delete your personal data from the account settings or by emailing us. You can complain to the Information Commissioner's Office if you think we have handled your data badly.