Privacy Policy

Welcome to Anywaye. We provide a platform that enables businesses (our "Customers") to create and deploy conversational AI agents for their products and services. This Privacy Policy explains how Anywaye ("we," "us," or "our") collects, uses, and shares information in connection with the operation of our platform and services.

Our Role in Data Protection

A central aspect of our service is the distinction between a "Data Controller" and a "Data Processor." For the personal data of our Customers' end-users, our Customer is the Data Controller. They determine the purposes and legal basis for processing personal data. Anywaye acts as the Data Processor, processing this data solely on behalf of and at the documented instruction of our Customer, as governed by our Data Processing Agreement (DPA).

For the data related to our Enterprise Customers' accounts (e.g., team member login information, billing details), Anywaye is the Data Controller.

I. For Our Enterprise Customers

This section details the data we process when you use the Anywaye platform to build, deploy, and manage your AI agents.

1. Information We Collect

• Account & Billing Information: We collect business contact information (names, emails, roles) to manage your account, provide support, and facilitate communication. We also collect payment and transaction details for billing, processed securely by our payment sub-processor.
• Agent Configuration Data: This includes the API specifications you connect, authentication credentials for your APIs (which are always stored encrypted), and the business rules, guardrails, and behavioral prompts you define in Anywaye Studio.
• Platform Usage Data: We collect metadata and analytics about how your team uses our platform, such as feature engagement, performance metrics, and audit logs. This data is essential for billing, monitoring service health, and improving our platform's functionality.

2. How We Use This Information

• Service Provision: To operate the platform, manage your account, generate invoices, provide customer support, and ensure service reliability.
• Platform Improvement: We analyze aggregated, anonymized usage trends to inform our product development, enhance security, and improve user experience. Your specific Configuration Data and your end-users' data are never used to train models for other customers.

3. Authentication, Authorization, and Security

Security is foundational to our platform. We provide robust mechanisms to ensure that data access is secure and adheres to your established policies.

• Authentication: Our platform integrates with your corporate identity provider via SAML 2.0-based Single Sign-On (SSO). This allows your team to authenticate using your existing credentials, enforcing your organization's password and access policies.
• Authorization and Permission Inheritance: A core security principle at Anywaye is that we inherit your existing permission model. An end-user interacting with an Anywaye agent can only access the data and perform actions that their user account is already authorized to access within your own backend systems. We do not create new data access pathways; we provide a new interface to your existing, permissioned ones. This ensures the principle of least privilege is maintained.
• API Security: Credentials for your APIs are stored using strong, industry-standard encryption. All connections from our platform to your APIs are made over secure, encrypted channels.

II. For End-Users of Our Customers

This section applies if you are interacting with a conversational agent (ie the conversational interface) that is "Powered by Anywaye." In this scenario, the business providing the agent is our Customer.

1. Information We Process on Behalf of Our Customers

When you use an agent, we process the following information as instructed by the Customer whose service you are using:

• Conversation Data: The content of your conversation, including messages you send and the responses you receive.
• Customer-Hosted Data: To fulfill your request (e.g., "check my order status"), the agent accesses information from the Customer's systems. The agent's access is strictly limited by the permissions of your authenticated user account with that Customer.
• Usage Analytics: Anonymized data about interactions, such as the types of requests made and whether they were successful.

2. How Your Information Is Used

As a Data Processor, we use this information solely to:

• Provide the conversational service and perform actions within the Customer's product on your behalf.
• Provide the Customer with analytics to help them understand and improve their service.

For detailed information on how your data is used, please refer to the privacy policy of the company whose product you are using.

III. General Provisions

1. Data Sharing and Sub-processors

We do not sell personal data. We use a limited number of third-party sub-processors to provide our service.

• AI Model Providers (e.g., OpenAI, Anthropic, Google): Conversation data is sent to these providers to generate natural language responses. Our contracts with them prohibit them from using this data to train their general models or retaining it post-processing.
• Infrastructure Providers (e.g., AWS, Google Cloud): We use these providers to host our services and data.
• Payment Processors (e.g., Stripe): We use a third-party processor to handle billing for our Enterprise Customers. We do not store credit card details on our own servers.

2. Your Privacy Rights and Choices

For End-Users: Because we are a Data Processor for your data, you should direct any requests to exercise your data protection rights (such as access, correction, or deletion) to the company whose service you are using.

For Enterprise Customers: You may review, update, or delete your account information by logging into your Anywaye Studio account or contacting your account manager.

3. Contact Us

For privacy-related inquiries, please email us.