Privacy Policy

Superagent Technologies, Inc.
Last updated: 8/31/2026

This Privacy Policy describes how Superagent Technologies, Inc. ("Superagent," "we," "us," or "our") processes personal information that we collect through superagent.sh, our authenticated application, our social media pages, marketing activities, and other services that link to this Privacy Policy (collectively, the "Service").

This Privacy Policy applies when Superagent determines why and how personal information is processed, such as account, billing, website, marketing, and business-contact information. When a customer submits data for Superagent to process on the customer's behalf through our products, API, MCP server, webhooks, or integrations ("Customer Data"), the customer controls that processing and our Global Data Processing Addendum applies.

See our Cookie Notice for information about cookies and similar technologies.

Personal information we collect

Information you provide to us

Personal information you may provide through the Service or otherwise includes:

1. Contact and professional data, such as your name, email address, job title, company, organization, and contact preferences.
2. Account and profile data, such as your username, profile image, organization membership, account preferences, and authentication information. Authentication credentials are handled by our authentication provider; we do not receive your password from third-party sign-in providers.
3. Communications data, including messages, support requests, survey responses, and other communications with us.
4. Transactional data, such as your selected plan, billing contact, order and subscription history, credit allocation and usage, and payment status. Payment card information is collected directly by Stripe and is not stored by Superagent.
5. Integration data, such as the identity of connected repositories, installations, organizations, and integration configuration. Content that a customer authorizes us to process through an integration is Customer Data governed by the Global Data Processing Addendum.
6. User-generated content and input data, such as content you submit to public forms, support channels, or product interfaces. Customer Data submitted for product processing remains governed by the Global Data Processing Addendum.
7. Other data that you choose to provide, which we use as described in this Privacy Policy or as disclosed when it is collected.

Please do not intentionally submit protected health information, payment card data, biometric data, government identification numbers, children's data, or other regulated sensitive data to the Service unless Superagent has expressly agreed in writing to process it.

Third-party sources

We may obtain personal information from:

• Customers and organization administrators, such as when they invite you to an organization or configure an integration.
• Connected services, such as GitHub or Google, when you authorize the connection. The information we receive depends on the service, permissions, and your settings.
• Service providers and business partners that help us operate, secure, market, and support the Service.
• Public sources, including public repositories, contribution histories, professional profiles, and other publicly available sources used to provide the Service.
• Business transaction partners in connection with a prospective or completed financing, acquisition, merger, reorganization, or sale of assets.

Automatic data collection

We and our service providers may automatically collect:

1. Device data, such as browser and operating-system type, device type, language settings, IP address, and general location inferred from IP address.
2. Online activity data, such as pages viewed, features used, navigation paths, access times, referring pages, clicks, scrolls, and interactions with our communications.
3. Diagnostic and security data, such as logs, error reports, performance data, authentication events, and signals used to prevent fraud, abuse, and unauthorized access.
4. Session-replay data for authenticated users, such as clicks, navigation, and interface interactions. We configure replay tools to reduce collection of sensitive field values, but you should not enter sensitive information into fields not intended for it.

We do not collect precise geolocation through the Service.

Tracking and other technologies

We use cookies, browser storage, pixels, and similar technologies to provide authentication, maintain security, remember preferences, understand Service usage, diagnose errors, and improve performance. We do not use these technologies to sell personal information or deliver targeted advertising.

Anonymous visitors are measured using cookieless or privacy-preserving analytics where supported. Authenticated use may involve persistent identifiers and session replay. For details and available controls, see our Cookie Notice.

Artificial intelligence processing

Some Superagent products use third-party infrastructure providers to perform model inference. Current provider categories are identified on our Subprocessor List. We may change the models used within those services as technology evolves.

Superagent does not use Customer Data or personal information to train, fine-tune, or improve generalized artificial-intelligence models, and contractually restricts its subprocessors from doing so, unless the customer expressly instructs or authorizes that use in writing. Provider safety and abuse-monitoring processing may apply as described in the applicable provider terms and our Global Data Processing Addendum.

How we use personal information

We may use personal information to:

Deliver and operate the Service

• create, authenticate, secure, and administer accounts and organizations;
• provide products, integrations, APIs, MCP access, webhooks, support, and requested functionality;
• process subscriptions, allocate credits, administer usage limits, and maintain transaction records;
• communicate service announcements, security alerts, policy updates, and administrative messages; and
• respond to questions, requests, and feedback.

Improve and analyze the Service

• understand how the Service is used;
• diagnose errors and performance issues;
• improve usability, reliability, safety, and product functionality; and
• develop new products and features using aggregated or deidentified information.

Market the Service

• send product news and marketing communications where permitted by law;
• personalize communications based on your relationship with us; and
• measure engagement with our communications.

You may opt out of marketing emails using the unsubscribe link in the message or by contacting us. You will continue to receive necessary service communications.

Comply and protect

• comply with law, lawful requests, and legal process;
• protect the rights, privacy, safety, and property of Superagent, our users, and others;
• audit compliance with legal, contractual, and internal requirements;
• enforce the agreements that govern the Service; and
• prevent, identify, investigate, and deter fraud, abuse, security incidents, and unlawful activity.

Create deidentified or aggregated data

We may create aggregated or deidentified information that does not reasonably identify an individual. We may use and disclose that information for lawful business purposes and will not attempt to reidentify it except to test whether our deidentification processes comply with law.

How we share personal information

We may share personal information with:

• Service providers and subprocessors that provide hosting, database, authentication, analytics, session replay, error monitoring, email, payments, electronic signatures, integrations, AI inference, sandbox infrastructure, security, and support services. Our public Subprocessor List identifies providers that may process Customer Data.
• Payment processors. Stripe collects and processes payment information under its own privacy policy. See Stripe's Privacy Policy.
• Connected services and parties designated by you. We share information with services such as GitHub, webhook destinations, or signing providers when you direct us to connect or send data to them.
• Professional advisers, such as lawyers, accountants, auditors, bankers, and insurers.
• Authorities and others when reasonably necessary for compliance and protection purposes.
• Business transferees in connection with a financing, merger, acquisition, reorganization, bankruptcy, or sale of all or part of our business or assets.

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising or process it for targeted advertising.

Your choices

Account information

You may review or update certain account information through the Service. To close your account or request assistance, contact privacy@superagent.sh.

Communications

You may opt out of marketing emails by following the unsubscribe instructions in the message. You cannot opt out of non-marketing communications necessary to provide or secure the Service.

Cookies and similar technologies

Most browsers let you remove or reject cookies and clear browser storage. Blocking essential storage may prevent authentication or other Service features from working. See our Cookie Notice.

Declining to provide information

We need certain information to provide the Service. If you do not provide required information, we may be unable to create an account, process an order, or provide requested functionality.

Retention

We retain personal information for as long as reasonably necessary to provide the Service, fulfill the purposes described in this Privacy Policy, comply with legal, accounting, and reporting requirements, establish or defend legal claims, and prevent fraud or abuse.

Retention periods vary according to the amount, nature, and sensitivity of the information, the risk of harm from unauthorized use or disclosure, the purpose of processing, whether the purpose can be achieved by other means, contractual commitments, and legal requirements. When information is no longer required, we delete or anonymize it, or securely isolate it until deletion is possible.

Customer Data retention is governed by the Agreement and our Global Data Processing Addendum.

Security

We use technical, organizational, and physical safeguards designed to protect personal information. No internet transmission or storage technology is completely secure, and we cannot guarantee absolute security.

You are responsible for securing your credentials, devices, connected accounts, and configurations and for promptly notifying us of suspected unauthorized use.

International data transfers

Superagent is headquartered in the United States and uses service providers that operate in the United States and other countries. Personal information may therefore be transferred to countries whose laws provide different levels of protection.

Where required, we use transfer mechanisms such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, adequacy decisions, or other lawful safeguards. You may request information about the applicable safeguard by contacting privacy@superagent.sh.

Children

The Service is intended for business users who are at least 18 years old. We do not knowingly collect personal information from children. If you believe a child provided personal information to us, contact privacy@superagent.sh.

State privacy rights notice

This section applies to residents of U.S. states whose privacy laws apply to our processing.

Depending on your jurisdiction and subject to legal exceptions, you may have rights to:

• request information about our collection, use, and disclosure of personal information;
• access, correct, or delete personal information;
• obtain a portable copy of personal information;
• appeal our denial of a request;
• opt out of sales, targeted advertising, or certain profiling; and
• exercise your rights without unlawful discrimination.

We do not sell personal information, share it for cross-context behavioral advertising, use it for targeted advertising, or use personal information for automated decisions that produce legal or similarly significant effects.

Exercising state privacy rights

Submit a request to privacy@superagent.sh or mail it to the address in the "How to contact us" section. Describe the right you want to exercise and the information to which your request relates.

We may verify your identity by matching information in your request with account records, asking you to authenticate your account, or requesting additional information permitted by law. Authorized agents must provide evidence of their authority, and we may also verify the consumer's identity directly.

Information practices

The following table summarizes our practices currently and during the previous 12 months. Information voluntarily submitted in free-form fields may contain other information.

We do not use or disclose sensitive personal information to infer characteristics about consumers.

California residents may also request information under California's "Shine the Light" law about certain disclosures for third-party direct marketing. We do not disclose personal information to third parties for their own direct marketing.

Notice to European users

This section applies to individuals in the European Economic Area and United Kingdom ("Europe").

Controller

Superagent Technologies, Inc. is the controller of personal data covered by this Privacy Policy. This controller notice does not apply where Superagent processes Customer Data solely on behalf of a customer.

Legal bases

European privacy rights

Subject to applicable conditions and exceptions, you may ask us to:

1. provide access to personal data and information about its processing;
2. correct inaccurate personal data;
3. delete personal data;
4. restrict processing;
5. provide a portable copy of personal data;
6. stop processing based on legitimate interests;
7. stop direct marketing; and
8. withdraw consent, without affecting processing that occurred before withdrawal.

Submit requests to privacy@superagent.sh. You may also complain to the data protection authority where you live or work or where you believe an infringement occurred. EEA authority contact information is available from the European Data Protection Board, and UK residents may contact the Information Commissioner's Office.

Transfers outside Europe

We are based in the United States, and personal data may be processed in the United States and other countries outside Europe. Where a recipient is not in a jurisdiction recognized as adequate, we use appropriate safeguards or another lawful transfer mechanism. Contact us for information about the safeguard relevant to your personal data.

Other sites and services

The Service may link to websites and services operated by third parties. We do not control those services, and their privacy practices are governed by their own notices.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version, revise the effective date, and provide additional notice when required by law.

How to contact us

For questions, complaints, or privacy requests, contact:

Superagent Technologies, Inc.
1111B S Governors Ave, Suite 3232
Dover, Delaware 19904
United States

Email: privacy@superagent.sh