1. Introduction

Digital Technology Agents ("DTA", "we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it. By using the Platform, you agree to the practices described in this policy.

2. Information We Collect

We collect limited information necessary to operate the Platform:

• Access tokens: When you enter an access token, we validate it against our database and record its use count and last-used timestamp. We do not collect your name, email address, or any personally identifying information at this stage.
• Session data: Your token tier and trial usage counts are stored in your browser's sessionStorage. This data is local to your device and cleared when you close the browser tab.
• Usage logs: Our hosting infrastructure (Vercel) may automatically collect standard server logs including IP addresses, browser type, pages visited, and timestamps. These logs are used for security monitoring and platform improvement.
• AI interactions: Queries you submit to AI features (such as CIRA's Desk or Dig Deeper) may be processed by third-party AI providers. Do not submit sensitive personal information through these features.

3. How We Use Your Information

We use the information collected to:

• Authenticate and authorise your access to the Platform.
• Enforce access tier limits (Dev, Trial, Guest).
• Monitor and prevent abuse of the Platform.
• Improve the Platform's performance, features, and content.
• Comply with legal obligations.

We do not sell, rent, or trade your information to third parties for marketing purposes.

4. Third-Party Services

The Platform uses the following third-party services which may process data on our behalf:

• Supabase: Used for secure token storage and validation. Data is stored in encrypted databases subject to Supabase's privacy policy.
• Vercel: Used for hosting and content delivery. Standard web server logs are collected per Vercel's privacy policy.
• xAI (Grok): Used to power AI features. Queries submitted to AI features are processed by xAI subject to their terms of service and privacy policy.

We encourage you to review the privacy policies of these third-party providers.

5. Cookies and Local Storage

The Platform uses browser sessionStorage to store your authentication state and trial usage counters locally on your device. This data is not transmitted to our servers and is automatically cleared when your browser session ends.

Our hosting provider (Vercel) may set cookies for performance and analytics purposes. You can configure your browser to refuse cookies, though this may affect Platform functionality.

6. Data Security

We implement industry-standard security measures to protect data processed by the Platform, including encrypted database storage via Supabase, HTTPS encryption for all data in transit, and server-side token validation using restricted service keys.

However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security and are not responsible for breaches resulting from factors outside our control.

7. Data Retention

Token usage records (use count and last-used timestamp) are retained for as long as the token remains in our system. Session data stored in your browser is cleared at the end of your browser session. Server logs retained by Vercel are subject to their data retention policies.

8. Children's Privacy

The Platform is not directed at or intended for use by individuals under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

9. Your Rights

Depending on your jurisdiction, you may have rights including:

• The right to access information held about you.
• The right to request correction or deletion of your data.
• The right to object to certain processing of your data.
• The right to data portability.

To exercise these rights, please contact us through the Platform. We will respond within a reasonable timeframe in accordance with applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date. Continued use of the Platform after any changes constitutes your acceptance of the updated policy.

11. Contact

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us through the Platform.