Privacy Policy

1. Your Data is Confidential

All data you store, generate, or process through Tropic is treated as confidential and belongs to you. We do not use your data for any purpose other than providing you the Service. We do not sell, license, or share your data with third parties outside of what is strictly necessary to operate the platform (see Section 4).

2. AI Model Training

Tropic does not use your data to train AI models. When you use Tropic-provided model API keys, your conversations and agent interactions are not used for model training. This is opt-out by default, meaning no action is required from you.

If you choose to use your own model API key, the data handling and training policies of your model provider apply. It is your responsibility to ensure your account with that provider is configured according to your preferences regarding data usage and training opt-out.

3. Information We Collect

We collect the minimum information necessary to operate the Service:

• Account information: Email address and authentication data for login and identity.
• Payment information: Processed by our payment provider. We do not store your credit card details.
• Usage data: VM runtime and credit consumption for billing purposes.
• Credentials you provide: API keys and configuration you store are encrypted at rest using AES-256-GCM and remain within Tropic's infrastructure.
• Log data: IP addresses, browser type, and access timestamps for security and debugging.

4. Data Boundary

All data processed by Tropic remains within Tropic's controlled infrastructure. We do not share your data with third parties except as required to operate the core platform:

• Authentication: Email and login credentials for account access.
• Payments: Transaction details for credit purchases.
• Infrastructure: VM compute and storage within our cloud provider.

These integrations are limited to their specific operational function. None of these providers have access to the contents of your VM, your conversations, your agents, or your files.

5. Your VM Environment

Each user receives an isolated virtual machine. We do not access, monitor, or log the contents of your VM beyond what is necessary for provisioning and billing. Your conversations, files, agents, and activity within the VM are private to you.

6. Data Security

We use industry-standard security measures including AES-256-GCM encryption for stored credentials, TLS for all data in transit, isolated VM environments per user, and VPN for internal communication. No ports on your VM are exposed to the public internet.

7. Data Retention

Account data is retained while your account is active. When you delete your account, we delete your user data, credentials, and terminate any running VMs. Billing records may be retained as required by law.

8. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us. You can delete your account and all associated data through the account management interface.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by updating the date at the top of this page.

10. Contact

For privacy-related questions, contact us at privacy@tropic.bot.