Privacy Policy

Last Updated: March 30, 2026

This Privacy Policy explains how Floyd ("Floyd," "we," "us," or "our") collects, uses, and shares information when you use our website, API, dashboard, and documentation (collectively, the "Services").

1. Scope

Floyd provides cloud infrastructure for running AI agents. We process data in two categories:

1. Account Data: Information about you (the developer/business using Floyd), such as account and billing information.
2. Agent Data: Code, instructions, files, and execution logs your Agents generate through the Services.

2. Information We Collect

A. Account Data You Provide

• Account information (name, email, authentication credentials).
• Billing information (subscription status, invoices). Payments are processed by our payment provider (e.g., Stripe). We do not store full payment card numbers.
• Workspace configuration (agent names, model preferences).

B. Agent Data

• Agent instructions and configuration submitted through the dashboard.
• Run logs, tool call history, and outputs.
• Files stored in persistent sandbox storage.
• Environment variables and API keys you configure (stored encrypted).

You control what data your Agents process. Do not submit sensitive personal data unless we have explicitly agreed in writing.

C. Information Collected Automatically

• API logs and diagnostics (endpoints called, timestamps, response codes).
• Usage data in the dashboard (pages viewed, actions taken).
• Device/log data (IP address, browser type, operating system).
• Cookies for authentication and security.

3. How We Use Information

1. Provide and operate the Services (running agents, managing sandboxes, scheduling).
2. Maintain security, prevent abuse, and enforce limits.
3. Debug issues and improve reliability.
4. Provide support and communicate with you.
5. Process billing and measure usage.
6. Comply with legal obligations.

4. How We Share Information

We do not sell personal information.

We may share information with:

1. Service providers (hosting, databases, monitoring, email delivery).
2. Payment processors (e.g., Stripe).
3. Legal and safety: to comply with law or protect rights and security.
4. Business transfers: in connection with a merger, acquisition, or sale of assets.

5. Data Retention

• Account data: retained while your account is active and as needed for legal purposes.
• Agent data: retained while your agents exist. Deleted when you delete an agent or close your account.
• Logs: retained for a limited period for debugging, then deleted or de-identified.

6. Security

We use reasonable safeguards to protect information, including encryption of API keys and credentials at rest. No system is 100% secure. You are responsible for keeping your credentials confidential.

7. Cookies

We use essential cookies for authentication and security. We may use analytics to understand usage and improve the Services.

8. International Data Transfers

We may process information in the United States and other countries where we or our service providers operate.

9. Children's Privacy

The Services are not directed to children under 18.

10. Changes to This Policy

We may update this Privacy Policy. We will update the "Last Updated" date and provide notice for material changes.

11. Contact

For questions, please contact hey@floyd.run.