Where does my data live?
In the United States, on established cloud infrastructure. The Privacy Policy lists every provider we use and what each one receives.
Your business stays yours.
Letting agents into your inbox and your accounts is a real decision. Here is what happens to your data, in plain words.
Who can see my workspace?
You. Database and file rules keep each account to the workspaces it owns, and nothing is shared between workspaces. Our team can reach data only to give support you ask for, keep the service running and secure, or meet the law. There is no feature that lets us sign in as you.
Can every agent reach everything?
No. You decide, agent by agent, which apps, tools and knowledge folders each one may use. An agent with an app switched off cannot use it, so the one writing your posts never has to see your invoices.
Is it encrypted?
Yes, in transit and at rest. Every connection uses HTTPS, and stored data is encrypted at the storage level. Private files open only through signed links that expire after about an hour.
What do AI providers receive?
What a job needs: your request, the context the agent pulls in and the results of its tools. It goes to the AI provider running that job, under that provider's terms. We do not add your account name or email to these requests, though they can appear in the content. We never train AI models on your content, and we never sell it. For the commercial services we use, the provider's terms generally do not allow training on it either.
How are my app connections protected?
You sign in on each app's own page, so we never see that password. The access an app grants is held by our connection provider, outside our own database. You can disconnect an app at any time, which removes the connection and stops future access.
What about my own AI keys?
On Growth and Scale you can run agents on your own account with an AI provider. Your key is stored encrypted, and after you save it the app shows only a short hint of it.
Do you see my card?
No. You enter card details on pages hosted by Stripe, which processes every payment.
Can I delete everything?
Yes. Most content is kept until you delete it or delete the workspace, and deletion starts at once. Some records stay for legal and accounting reasons, such as invoices. Files and deliverables can be downloaded at any time.
Limits on the agents. Not only on us.
Agents read outside content as untrusted.
Emails, web pages and files can carry instructions meant to trick an agent. Outside content is marked and screened before an agent acts on it.
Anything risky waits.
Approvals are tied to the exact action shown to you, and an unanswered request expires without running.
Every change has a name on it.
Each write carries the agent and the job that made it, so it can be found and put back.
One switch stops them all.
Halt every agent in a workspace at once, from any page.
Found something?
Write to info@simurg.me. If you think your account has been compromised, do it now and we will treat it first.