Privacy Policy

1. Introduction

AgenticNode (“we”, “us”, or “our”) is a visual agentic coding platform operated by VeriduxLabs. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform at agenticnode.io and any related services.

By using AgenticNode, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please do not use our services.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address and authentication credentials through Supabase, our authentication provider. If you sign in via a third-party OAuth provider (e.g., GitHub, Google), we receive the profile information you authorize that provider to share.

2.2 Workflow Definitions

When you save workflows, we store your workflow definitions (node graphs, YAML configurations, and associated metadata) in our database to enable persistence, sharing, and marketplace publishing features.

2.3 API Keys

If you choose to store API keys (for OpenAI, Anthropic, Google, or other LLM providers) in our encrypted key vault, those keys are encrypted at rest using AES-256 encryption before being stored in our database. API keys are never logged, never transmitted in plaintext after initial submission, and are only decrypted server-side at the moment of workflow execution. You can view, rotate, or delete your stored API keys at any time from your account settings.

2.4 Execution Logs

When you run workflows, we generate execution logs that include timestamps, step outcomes, tool call summaries, token usage counts, and error messages. These logs are stored to provide execution history and analytics features. Execution logs do not contain your source code, API keys, or the full content of LLM responses beyond status and token counts.

2.5 Analytics Data

We use Veridux Analytics, our privacy-respecting analytics system, to collect anonymized usage data including page views, feature usage patterns, and session duration. This analytics system does not use cookies for tracking, does not collect personally identifiable information, and does not share data with third-party advertising networks. Analytics data is used solely to improve the platform experience.

3. How We Use Your Information

• Service delivery: To authenticate you, save your workflows, execute your coding workflows, and provide execution history.
• Platform improvement: To analyze aggregated, anonymized usage patterns and improve platform features, performance, and reliability.
• Billing: To process subscription payments through Paddle, our Merchant of Record.
• Communication: To send essential service notifications (e.g., security alerts, billing confirmations) and, if you opt in, product updates and newsletters.
• Security: To detect and prevent abuse, unauthorized access, and malicious use of the platform.

4. AI Processing and Code Execution

Workflows are executed server-side on our infrastructure hosted by Vercel. When a workflow includes AI agent steps, your prompts and context are sent to the LLM provider whose API key you configured (e.g., OpenAI, Anthropic, Google). We act as a conduit — we do not train models on your data, and each LLM provider's own privacy policy governs their handling of your prompts.

Non-AI tool executions (bash commands, file operations, git operations, grep) are processed entirely on our servers and are not shared with any third party.

5. Third-Party Services

We rely on the following third-party services:

• Supabase — Authentication and database. Supabase processes your email and account data under their privacy policy.
• Paddle — Payment processing and subscription billing. Paddle acts as Merchant of Record and handles all payment data, tax compliance, and billing under their privacy policy. We do not store credit card numbers or payment details.
• Vercel — Application hosting and serverless function execution under their privacy policy.
• LLM Providers— When you configure API keys for OpenAI, Anthropic, Google, or other providers, your workflow prompts are sent to those providers during execution. Each provider's privacy policy applies to their processing of your data. You choose which providers to use and can opt for local models (Ollama) to keep all processing on your own hardware.

6. Data Retention

We retain your account information and saved workflows for as long as your account is active. Execution logs are retained for 90 days and then automatically purged. If you delete your account, all associated data (account information, workflows, API keys, and execution logs) is permanently deleted within 30 days.

7. Data Security

We implement industry-standard security measures to protect your data:

• API keys are encrypted at rest using AES-256 encryption.
• All data in transit is encrypted via TLS 1.2+.
• Database access is restricted via row-level security policies in Supabase.
• Workflow executions run in isolated environments with no cross-user data access.
• We conduct regular security reviews of our infrastructure and dependencies.

8. Your Rights

You have the right to:

• Access your personal data stored on our platform.
• Export your workflow definitions in YAML format at any time.
• Delete your API keys, workflow data, execution logs, or your entire account.
• Correct inaccurate personal information.
• Opt out of non-essential communications.

To exercise any of these rights, contact us at privacy@agenticnode.io.

9. Cookies

AgenticNode uses only essential cookies required for authentication session management (provided by Supabase Auth). We do not use advertising cookies, tracking cookies, or any third-party cookie-based analytics.

10. Children's Privacy

AgenticNode is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (if you have an account) and update the “Last updated” date at the top of this page. Your continued use of AgenticNode after changes are posted constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or our data practices, contact us at:

privacy@agenticnode.io

VeriduxLabs