The short version. We collect what we need to run your AI team and nothing more. We never see your card number, our agents are built to refuse your passwords, and we do not sell or rent your data to anyone.
Passwords and one-time codes. Agents are built to refuse them, and logging into any site is always done by you, the human.
Card numbers. Payment runs through Stripe, and card details go to Stripe directly, never through us.
We also do not collect anything from sites you have not approved for the browser extension.
To run your arena, to make your agents better at their job for you, to support you Backstage, to bill correctly, and to keep the platform secure. That is the list. We do not use your content to train models, and we do not use it for advertising.
Your agents think using large language models from providers such as Anthropic. When an agent works, the relevant conversation and documents are sent to the model provider to generate the response, under our agreement with them. We use business and API tiers where providers commit not to train on the data.
"Cloudsdale for your team" pairs your Chrome with your own Cloudsdale team.
On your device it stores only your team's address, your pairing code while you enter it, a reconnect token so your browser can re-attach after Chrome restarts, and whether you are currently paired or have pressed STOP. Removing the extension deletes all of it.
What it sends your team is the page title, the page address, and the visible page text (up to the first 30,000 characters) for the single tab it controls, and only when an agent on your team asks for it. Never on a schedule, never in the background, and never from your other tabs.
It never reads your passwords, your cookies, or your logged-in sessions. Your team acts inside your browser, which is what lets them reach sites you are signed into without ever receiving the credentials themselves. If a site asks for a password or a one-time code, the work stops and waits for you.
STOP, in the extension, halts everything immediately. It is enforced inside the extension itself, so it takes effect whether or not the server agrees.
Stripe for payments, model providers for AI processing, and infrastructure providers who host our servers. Each gets only what their job needs. No selling, no renting, no ad networks. We would disclose data if Singapore law compels us to, and we would tell you unless the law forbids it.
Your arena's data is stored in your own tenancy, separated from every other client's. We keep it while your subscription runs. When your arena closes, we give you an export on request and delete your content within 60 days, keeping only what billing and tax law require us to hold.
Under the PDPA you can ask us what personal data we hold about you, ask us to correct it, or withdraw consent (which may mean parts of the service stop working). Write to us and we will respond within 30 days.
Our data protection contact is team@empathicagility.io.
The arena uses a session token to keep you signed in, and nothing for tracking or advertising.
If this policy changes in a way that matters, we will tell you Backstage and by email at least 30 days before it takes effect. A change that widens what the browser extension collects also requires a fresh Chrome Web Store review before it can reach you.
Questions about this policy, or a request to see or delete what we hold about you, go to team@empathicagility.io.