Privacy Policy

Last updated: February 2026

Gypsum AI, Inc. ("Gypsum AI," "we," "our," or "us") operates the Polos platform and the polos.dev website (collectively, "the Service"). This Privacy Policy explains our practices regarding data collection, use, and disclosure. By accessing or using the Service, you agree to these privacy practices.

Information Collection and Use

Account Information. When you sign up for a Polos account, we collect your name, email address, and basic account details necessary to provide the Service. If you sign up using a single sign-on provider (such as Google or GitHub), we receive your name, email address, and profile picture from that provider.

Payment Information. If you purchase a paid plan, your payment information is collected and processed by our third-party payment processor. We do not store credit card or financial account details on our servers.

Communications. If you contact us directly, we may receive your name, email address, and the contents of your message.

Usage Data

We collect anonymous, aggregated statistical data about usage of the Service for operational and improvement purposes. This includes page views, feature usage patterns, and general interaction data. This information is aggregated and cannot be used to identify any individual.

Polos Cloud Platform

Polos Cloud is our hosted orchestration service for running durable AI agent workflows.

  • Your data, your ownership: All workflow execution data, agent state, and outputs processed through the Polos Cloud platform are owned entirely by you. We act as a data processor on your behalf.
  • No data sharing: We do not sell, share, or disclose your workflow or execution data to any third party. Your agent execution data is never used for training AI models, advertising, or any purpose other than providing you the Service.
  • Data isolation: Your execution data is logically isolated from other customers and is only accessible by you and your authorized team members.
  • Data retention: You may delete your data at any time. Upon account termination, we will delete your execution data in accordance with our data retention schedule.

Polos Open-Source SDK

The Polos open-source SDK (available on GitHub) does not collect any personal information, telemetry, or usage data. It runs entirely within your own infrastructure.

Analytics

The Polos website uses analytics tools to collect non-personal, aggregated usage data for the sole purpose of improving the Service. No personally identifiable information is collected, stored, sold, or shared with analytics providers.

Data Sharing and Sale

Gypsum AI, Inc. does not sell, share, or disclose any personal data or customer execution data to third parties for advertising, marketing, or any other commercial purpose.

We may share information only in the following limited circumstances:

  • Service Providers. We may employ third-party companies to help operate the Service (e.g., hosting, payment processing). These providers access only the minimum data necessary to perform their function and are contractually bound to protect it.
  • Legal Requirements. We may disclose information if required by law, court order, or governmental request, or to protect the rights, safety, or property of Gypsum AI, its users, or the public.
  • Business Transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change and any choices you may have regarding your information.

Security

We maintain industry-standard security practices to protect all data the Service handles, including encryption in transit and at rest, access controls, and regular security reviews.

Links to Other Sites

Our Service may contain links to external websites. Gypsum AI, Inc. is not responsible for the content or privacy policies of third-party sites.

Children

Our Service is not directed to individuals under the age of 18, and we do not knowingly collect personal data from individuals under the age of 18. If you believe we may have collected personal data from someone under the applicable age of consent, please contact us using the methods described below.

International Visitors

Our Service is hosted in the United States. If you access the Service from outside the United States, please be aware that your information may be transferred to and processed in the United States. By using the Service, you consent to such transfer and processing.

Changes to This Privacy Policy

We may update this policy from time to time. The latest version will always be posted at polos.dev/privacy and will be effective immediately upon posting. If we make material changes, we will notify you through the Service or by email.

Contact Us

If you have any questions about this Privacy Policy, please contact us at support@polos.dev.