Do not sell or share my data
The short answer is no, we never do. Here is exactly what that means, what we share with whom, and the rights you have under GDPR, CCPA, CPRA and similar laws.
1. We do not sell your data
GetAutonome does not sell, rent, lease or trade your personal data. We have no advertising business, no data broker partnerships and no audience-sharing agreements with ad networks. The only revenue we make from your data is the subscription fee you pay us to run your AI agents.
2. What we share, and only when needed
To run the service we share strictly the minimum data required with a small number of sub-processors. They are all under contract to use the data only to deliver the service to you and never for their own marketing.
- Supabase (EU region), primary database, authentication and file storage.
- Cloudflare, edge runtime, DDoS protection and CDN.
- Stripe, payment processing and invoicing.
- Resend, transactional email delivery.
- OpenAI, Anthropic, Google, large language model inference for your agents, with zero-retention enterprise terms.
- Apideck, unified integration vault for tokens you connect (Gmail, HubSpot, Slack, etc).
The full, always-current list lives in our Trust Center. We notify you at least 30 days before adding a new sub-processor that handles personal data.
3. Your rights, in plain English
- Access, get a copy of everything we hold about you.
- Correct, fix anything wrong.
- Export, download your data in a portable format (JSON or CSV).
- Delete, ask us to permanently erase your account and all linked data.
- Restrict, ask us to stop a specific kind of processing.
- Object, opt out of any processing based on legitimate interest.
- Withdraw consent, at any time, with no effect on the lawfulness of past processing.
4. How to exercise your rights
Email privacy@getautonome.com from the address on your account. We verify your identity and respond within 30 days, usually within 72 hours. There is no fee. You can also self-serve account deletion from My settings.
5. California (CCPA / CPRA), EU (GDPR), UK, Brazil (LGPD)
All of the rights above apply globally, not just where the law requires them. If you have a complaint about how we handle your data you can also lodge it with your local supervisory authority (for EU customers, your national Data Protection Authority).