This addendum describes how Tectonic Agents processes personal data on your behalf when you use the service. Where you are a data controller for end-user content, we act as your data processor for that content and process it to provide the service.
You are the controller of the personal data you and your agents send through the service (for example Discord user IDs or in-game usernames). Tectonic Agents acts as your processor for that customer content, except where we process data as an independent controller (account, billing, security logs).
Our subprocessors (see the Subprocessors page) are sub-processors for processor activities.
We process personal data only to operate the service: routing agent tasks, storing configuration and history, billing, security, and support. We do not sell personal data or use customer content to train foundation models across customers.
We implement technical and organizational measures appropriate to the service, including per-tenant isolation controls, access controls, encryption of secrets at rest where designed, hashed session/agent tokens, and TLS in transit. See the Security page for product detail.
We use the subprocessors listed on the Subprocessors page. Material changes will be reflected there; enterprise customers may request additional notice terms in a signed DPA.
We will assist you in responding to data-subject requests to the extent the data is within our control. We will notify you without undue delay after becoming aware of a personal-data breach affecting your customer content, where legally required.
On termination or organization deletion, we delete or return customer content within product-defined windows, except where retention is required by law (for example certain billing records).
Contact email is not configured yet — set it under Admin → Settings → Legal identity.
This is a plain-language summary for product use. It is not legal advice. Questions? Use the support or privacy email above once configured, or the Discord link in the footer when set.