Privacy Policy

1. Overview

This Privacy Policy explains how Pixelite SL, which operates Permaura ("Permaura", "we", "us"), collects, uses and protects personal data when you use our website, console and hosted services (the "Service"). We are the data controller for the personal data described here.

We serve customers worldwide. Where the EU General Data Protection Regulation (GDPR), the UK GDPR, or Andorran data-protection law applies, we comply with it for the relevant individuals.

2. Information we collect

Account information

Your name, email address, authentication identifiers, organization and plan.

Billing information

Depending on your country, your subscription is sold either by Paddle as our Merchant of Record or directly by Pixelite SL. Where Paddle is the seller, Paddle collects and processes your payment details, and we receive only limited billing data, such as your plan, billing country, subscription status and card type or last four digits. If Pixelite SL sells your subscription directly, Braintree (a PayPal service) processes your payment and collects your card details, and we store the billing name, company, tax ID and address you give us so we can issue invoices, along with the countries the purchase was made from (the country you choose, and the countries your IP address and card indicate) as a record for tax purposes. On either route we also keep a fingerprint of the card that started the subscription, so a free trial cannot be claimed twice. We do not receive or store your full card number.

Usage and technical data

Log data, IP address, device and browser information, and how you interact with the Service, used to operate, secure and improve it.

How you found us

When you create an account on our website, we record how you found Permaura: the campaign tags (such as utm_source) and the referring site of the first visit we know of and of your latest one, the page you landed on, and your answer to the optional "How did you hear about Permaura?" question. Of the referring site we keep its address only, never the page or search terms, and we do not keep advertising click identifiers with your account. A visit is remembered between sessions only where analytics cookies are allowed (see section 11); otherwise only the visit in which you sign up is recorded. We use this to learn which channels bring people to Permaura, and it is deleted with your account.

Audit metadata

To provide a tamper-evident audit trail, we store metadata about actions taken through the Service, such as which agent requested what, which policy decided, and a hash and summary of each call. When a call is held for approval, the gateway also keeps the call's parameters and, once it runs, its result after redaction, so the person deciding can see what they are approving. That record stays for as long as the gateway keeps its data. On a hosted gateway it is held in our infrastructure, and when you open an approval in the console its contents pass through permaura.com. We do not store the secret values themselves.

Communications

Messages you send us for support, and the records of that correspondence.

3. Secrets and credentials

Permaura is a credential-custody product, so we treat the credentials you store with particular care. Secrets are sealed, the gateway never hands them to AI models, prompts, logs or agent processes, and it scrubs them from the responses agents receive. In local mode they are stored only on your device, and requests from your AI agents to your gateway do not pass through our servers. If your gateway has remote access turned on, requests you make to it through our console or app, including a credential you enter there, pass through our servers on the way to it; we relay them in memory and do not log or store them. If you use a managed permaura.app tunnel for remote access, it runs in Permaura's Cloudflare account and Cloudflare terminates TLS for it, so Permaura and Cloudflare can see the traffic for your gateway's permaura.app address, and Permaura's Cloudflare account can read the connector's logs of those requests and see your machine's network address; use your own tunnel or domain if you would rather that traffic stayed off Permaura's Cloudflare account and went only through the providers you choose. In hosted mode they are encrypted at rest and only briefly decrypted in memory at the moment of an authorized call, and we do not retain plaintext secrets. The keys that open a hosted vault are held in our cloud project, so Permaura's cloud administrators can technically reach them, and access to those keys is logged. This is an architectural safeguard, described honestly: it reduces risk substantially, but no system removes it entirely.

4. How and why we use information

We use personal data on the following legal bases:

• to provide and operate the Service (performance of our contract with you);
• to take payment and prevent fraud (contract, legal obligation and our legitimate interests);
• to secure, debug and improve the Service (our legitimate interests);
• to understand which channels and campaigns bring people to Permaura (our legitimate interests, and your consent where the law requires it for analytics cookies);
• to communicate with you about the Service (contract and legitimate interests);
• to send optional marketing where you have consented (consent, which you can withdraw at any time); and
• to comply with legal obligations.

5. Payments

Where Paddle is the seller, payments are processed by Paddle (Paddle.com Market Limited and its affiliates) as Merchant of Record and as an independent controller of the payment data it collects. Paddle's handling of your data is governed by its privacy notice at https://www.paddle.com/legal/privacy. Where Pixelite SL sells your subscription directly, payments are processed by Braintree, a PayPal service, which collects your card details and handles them under the PayPal Privacy Statement at https://www.paypal.com/us/legalhub/paypal/privacy-full.

6. Service providers and sub-processors

We use a small number of trusted providers to run the Service, for example cloud hosting and databases, content delivery, email delivery, push notifications and payments. They process data on our behalf under appropriate agreements, or as independent controllers where applicable (such as Paddle). A current list of sub-processors is available on request at privacy@permaura.com.

7. International data transfers

We are based in Andorra, and our providers may process data in the EU, the United Kingdom, the United States and elsewhere. Where personal data protected by the GDPR or UK GDPR is transferred outside those areas, we rely on an appropriate safeguard, such as an adequacy decision or standard contractual clauses. Andorra benefits from an EU adequacy decision for data protection.

8. Data retention

We keep personal data for as long as needed to provide the Service and for legitimate business and legal purposes, such as accounting and dispute resolution. Audit records may be kept for the period needed to provide tamper-evident history. When data is no longer needed, we delete or anonymise it.

If you use a hosted gateway, removing it (or deleting your account) keeps its vault downloadable for 96 hours, unless you choose to delete it sooner, and then deletes the gateway and its database. The keys that open its vault are scheduled for destruction 45 days after that deletion, by which time the last of the encrypted daily copies of its data we keep for disaster recovery has aged out (31 to 38 days after the deletion), so until then we could technically restore it. Its archived audit records are held under a separate 39-day retention lock before they can be deleted.

9. Security

We use technical and organizational measures appropriate to the risk, including envelope encryption of secrets, encryption in transit, key management, access controls, and ed25519-signed, hash-chained audit records. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, port, restrict or object to the processing of your personal data, and to withdraw consent where processing is based on it.

To exercise these rights, contact privacy@permaura.com. You also have the right to complain to a data-protection authority, such as the Andorran Data Protection Agency (APDA) or the supervisory authority in your country.

11. Cookies

We use essential cookies needed to sign you in and keep the Service secure. We also use Google Analytics (and, if we advertise, Google Ads conversion measurement) and a cookie of our own that remembers which link or campaign brought you to Permaura, so we can understand how the Service is found and used and improve it. In the European Economic Area, the United Kingdom, Switzerland, Andorra, Monaco, San Marino, the Vatican and Quebec, these are off until you accept them. Elsewhere they are on by default, and you can turn them off at any time from "Cookie preferences" at the foot of our pages; if your browser sends a Global Privacy Control signal, we treat it as turning them off. Vercel Web Analytics, which sets no cookies, counts visits and a few actions such as downloads, sign-ups and purchases without identifying you. You can also control cookies through your browser.

12. Children

The Service is not directed to children and is intended for users aged 18 or over. We do not knowingly collect personal data from children.

13. Changes

We may update this Privacy Policy from time to time. We will post the updated version with a new effective date and, where changes are material, provide additional notice.

14. Contact

For privacy questions or to exercise your rights, contact privacy@permaura.com. Permaura is operated by Pixelite SL, a company registered in Andorra (L-710633-B), at Ed. La Llobatera Bloc B 1-2, Coll D'Ordino, Andorra.