Privacy Policy

We process account details such as your email address and user identifier, the prompts and responses in your conversations, your subscription and usage status when you enroll, and basic operational data needed to keep the service secure and reliable. When you connect a service, we receive only the access authorized through that provider's secure connection flow.

We use this information to authenticate you, provide the requested AI and integration features, retain your chat history, prevent abuse, and improve reliability. We do not sell personal information or use connected-account data for advertising.

RAF Agent uses service providers including Supabase for authentication and database services, OpenAI for AI responses, Composio for user-scoped connections, Vercel for hosting, and the providers you choose to connect. Stripe processes payment details for paid subscriptions; RAF stores Stripe customer and subscription identifiers, not card numbers. Their processing is also governed by their own terms and privacy policies. Connection credentials, including OAuth tokens and API tokens, are kept server-side and are not placed in the browser bundle or chat transcript.

Conversation history is stored so it is available when you return. Access is isolated by your authenticated user ID and protected with database row-level security. We retain information only as long as reasonably needed to provide the service, meet legal obligations, and resolve abuse or security issues.

You can disconnect an integration from the RAF workspace or the provider itself. To request access, correction, or deletion of your account data, email raafatalhayek2@gmail.com.

We may update this policy as the product changes. Material updates will be reflected on this page with a new effective date. Questions can be sent to raafatalhayek2@gmail.com.