Skip to main content

Legal

Privacy Policy

ActantOS is built on the principle that data privacy is a governance right. This policy explains how we handle your information with the same rigor we apply to AI agent governance.

Effective date: January 1, 2026

1. Information We Collect

Information You Provide

When you create an account, request a demo, or contact us, we collect:

  • Name, email address, and company information
  • Account credentials (passwords are hashed and never stored in plaintext)
  • Communications you send us, including support requests
  • Payment and billing information (processed via our payment provider)

Information Collected Automatically

When you use the Services, we automatically collect:

  • Log data including IP address, browser type, pages visited, and timestamps
  • Usage data such as API call volumes and feature usage patterns
  • Device information including operating system and hardware identifiers
  • Cookies and similar tracking technologies (see Section 5)

Agent Activity Data (Enterprise)

For enterprise deployments, ActantOS processes agent action logs, policy evaluation results, and audit trails as part of the governance infrastructure. This data is processed on your behalf under your enterprise agreement and Data Processing Addendum (“DPA”). You retain ownership of all agent activity data processed through ActantOS.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve the Services
  • Process transactions and send related billing information
  • Send administrative notices, product updates, and security alerts
  • Respond to your inquiries and provide customer support
  • Monitor and analyze usage patterns to improve performance and security
  • Comply with legal obligations and enforce our policies
  • Send marketing communications (with your consent where required by law)

3. How We Share Your Information

ActantOS does not sell your personal information. We may share your information with:

  • Service Providers: Third parties who help us operate the Services (e.g., cloud infrastructure, payment processing, customer support tools) under strict confidentiality agreements
  • Legal Requirements: When required by law, court order, or governmental authority, or when necessary to protect the rights and safety of ActantOS, our users, or the public
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate confidentiality protections
  • With Your Consent: In any other case, only with your explicit consent

4. Data Retention

We retain personal information for as long as necessary to provide the Services and fulfill the purposes described in this policy. Account information is retained for the duration of your account plus a 90-day deactivation window. Enterprise audit log data is retained per your DPA agreement, with configurable retention periods available.

You may request deletion of your personal data at any time by contacting us at hello@actantos.com. We will process deletion requests within 30 days, subject to legal retention requirements.

5. Cookies and Tracking

We use the following types of cookies:

  • Essential cookies: Required for the Services to function correctly (e.g., authentication, session management). Cannot be disabled.
  • Analytics cookies: Help us understand how users interact with the Services to improve performance. You may opt out via your browser settings.
  • Preference cookies: Remember your settings and preferences for a better experience.

You can control cookies through your browser settings. Disabling certain cookies may limit functionality of the Services.

6. Security

ActantOS implements industry-standard security measures to protect your information, including:

  • Encryption in transit (TLS 1.3) and at rest (AES-256)
  • SOC 2-aligned controls (independent certification in progress — see our security page)
  • Regular penetration testing and vulnerability assessments
  • Role-based access controls and audit logging for all data access
  • Cryptographic audit vault for immutable record-keeping

Despite these measures, no internet transmission is 100% secure. We encourage you to use strong passwords and contact security@actantos.com immediately if you suspect unauthorized access to your account.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Request correction of inaccurate or incomplete data
  • Erasure:Request deletion of your personal data (“right to be forgotten”)
  • Portability: Request a machine-readable copy of your data
  • Objection: Object to processing of your data for certain purposes
  • Withdrawal of Consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at hello@actantos.com. We will respond within 30 days. EU/EEA residents may also lodge a complaint with their local data protection authority.

8. International Data Transfers

ActantOS operates globally. If you are located outside the United States, your information may be transferred to and processed in the US. For EU/EEA customers, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission as the legal mechanism for cross-border data transfers. Enterprise customers may request VPC deployment to keep data within their preferred jurisdiction.

9. Children’s Privacy

The Services are intended for enterprise use and are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided personal information, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice in the Services at least 30 days before the change takes effect. Your continued use of the Services after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: