Last updated: June 3, 2026 · Previous versions
01Scope & entity
This Privacy Policy describes how VUGA Enterprises LLC, a Florida limited liability company doing business as AgentPrizm, located at 18117 Biscayne Blvd Unit 1039, Aventura, FL 33160, United States ("AgentPrizm", "we", "us"), collects, uses, and shares information when you use our website, dashboard, and API (collectively, the "Service").
This Policy applies to information collected from you as a customer or visitor. It does not apply to data your end users create through your agents — we process that data on your behalf as described in our Terms of Service and our Data Processing Addendum (DPA). For a list of the third-party providers that process Customer Data on our behalf, see our Sub-processors page.
02What we collect
You give us
- Account information: name, work email, company, billing address, payment method.
- Communications: emails, support tickets, sales calls.
- Customer data: the memories your agents ingest. We process this on your behalf as a data processor under the DPA.
We collect automatically
- Usage data: API call counts, latency, feature usage. Used to bill, debug, and improve the product.
- Device & log data: IP, user agent, timestamps, error traces.
- Cookies: a single first-party session cookie. We do not use third-party advertising cookies.
03Why we use it
- Provide, secure, and improve the Service.
- Bill your account and prevent fraud.
- Communicate about your account, security, and material product changes.
- Comply with legal obligations.
We do not sell personal information. We do not share customer data with third parties for advertising. We do not train models on customer memories.
04When we share
We do not sell personal information. We share information only with:
- Sub-processors who help us run the Service. Our current sub-processors are listed at agentprizm.com/subprocessors. They include: Hostinger (VPS hosting, United States), Cloudflare (DNS and edge proxy, United States), OpenAI (embeddings and AI classification — customer memory text is sent to OpenAI in the United States under AgentPrizm's API account), Stripe (billing, United States), Resend (transactional email, United States), and — only where you connect them — Google, Notion, and Dropbox (optional content-source connectors). We notify you at least 30 days before adding a new sub-processor that processes Customer Data.
- Authorities when legally compelled. We notify you first unless prohibited by law.
- Acquirers in the event of a merger or asset sale, with notice and continued protection.
05Retention
We retain account information for as long as your account is active and for up to 24 months after closure for legal and accounting purposes. Customer data (memories your agents ingest) is retained per the container's policy you configure; deletion requests are honored within 30 days. You may request deletion of your account and associated personal information at any time by emailing [email protected] or using the account-deletion option in your settings; some records may be retained where required by law (for example, billing and tax records). Backups containing your data are purged on their normal rotation cycle.
06Health & sensitive data
The Service is a general-purpose memory tool and is not designed for, and must not be used to store or process, protected health information (PHI) or other data subject to special regulatory regimes. AgentPrizm is not HIPAA-compliant, does not offer a Business Associate Agreement, and must not be used for PHI. We do not hold SOC 2, HIPAA, ISO 27001, or similar certifications. You are responsible for ensuring the data you submit is appropriate for a service with our stated capabilities.
07Your rights
Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal information. To exercise any of these rights, email [email protected]. We will respond within 30 days and won't charge for reasonable requests.
California residents (CCPA/CPRA): You have the right to know what personal information we collect, to request deletion, to correct inaccurate personal information, and to opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising. We do neither. We do not sell or share personal information. As a business-to-business service, we process your personal information as a "service provider" under CCPA for the purposes described in this Policy.
EU/UK/EEA residents: Our legal basis for processing is contract performance (to deliver the Service), legitimate interests (security, fraud prevention, product improvement), and legal obligation. You may lodge a complaint with your local supervisory authority. See the International transfers section for how we handle transfers of your personal data outside the EU/EEA.
08International transfers
AgentPrizm is based in the United States (Florida). If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States and by our sub-processors in the United States.
For transfers of personal data from the European Economic Area (EEA), the United Kingdom, or Switzerland to the United States, we rely on the European Commission's Standard Contractual Clauses (SCCs) as the appropriate safeguard. The SCCs are incorporated into our Data Processing Addendum. We also note that OpenAI (which receives customer memory text for embedding and RAG) is located in the United States; our DPA addresses this transfer via SCCs. A copy of the applicable SCCs is available on request by emailing [email protected].
By using the Service from a jurisdiction outside the United States, you consent to the transfer of your information to the United States subject to the protections described in this Policy and, for business customers, the DPA.
09Contact
Questions, requests, complaints: [email protected], or write to:
VUGA Enterprises LLC dba AgentPrizm
18117 Biscayne Blvd Unit 1039
Aventura, FL 33160
United States
EU/UK customers may also contact us at that address for purposes of exercising your rights under GDPR or UK GDPR. We do not currently have a separate EU or UK representative, but we respond to all requests within 30 days.