Privacy Policy
This Privacy Policy explains how Sanklad Digital Ltd. collects, uses, and protects personal data when you use delegated.to.
1. Data We Collect
- Account data: name, email, authentication identifiers.
- Workspace data: prompts, tasks, agent activity, and deployment metadata.
- Operational data: logs, diagnostics, usage, and security telemetry.
- Billing data: payment session details from payment processors (not full card numbers).
- Analytics and device data: page views, click events, session duration, referrer URL, approximate geographic location (city/region derived from IP), browser type, operating system, screen size, and similar technical signals collected via cookies and similar technologies. Once you sign in, we associate a pseudonymous user identifier with this activity so we can measure product usage on a per-account basis.
2. How We Use Data
- Provide and operate the service.
- Deploy and manage your AI-agent infrastructure.
- Improve reliability, security, and product quality.
- Provide support and communicate service updates.
- Comply with legal obligations.
3. API Keys and Secrets
API keys you submit are handled as sensitive credentials and used to configure your deployment and connected providers. You should rotate credentials if you suspect compromise.
4. Third-Party Processors
We use third-party providers for authentication, payments, hosting, model routing, infrastructure operations, and analytics. Your data may be processed by those providers under their respective terms and policies. Current processors include (without limitation):
- Google Analytics 4 (Google LLC) — product and marketing analytics. Collects pageviews, events, device and approximate location data, and (post sign-in) a pseudonymous user identifier we send via the Measurement Protocol to attribute conversions such as sign-ups and purchases. See Google's Privacy Policy and Google Analytics Opt-out.
- PostHog — product analytics and session telemetry.
- Dub — referral and link attribution analytics.
- Meta (Facebook) — conversion measurement via the Meta pixel where applicable. See our section on Data Deletion for removing data we have received from Meta.
- Stripe — payment processing and subscription billing.
- Convex, Hetzner, Google Cloud Platform — application backend, hosting, and runtime infrastructure.
5. Cookies, Analytics, and Consent
We use cookies and similar technologies (including the _ga Google Analytics cookie) to measure how visitors use the site, remember preferences, and attribute conversions. When you first visit the site we present a cookie banner that lets you accept all cookies, reject non-essential cookies, or customize your choices by category (Strictly Necessary, Analytics, Marketing).
We implement Google Consent Mode v2: until you grant analytics or marketing consent, Google's tags operate in a "denied" state and do not store identifiers in your browser. You can change your preferences at any time by clearing your cookies or contacting us at kamal@delegated.to.
For users authenticated to delegated.to, we transmit a pseudonymous account identifier to Google Analytics (as user_id) and to our Stripe checkout flow so that purchase events recorded server-side via the Google Analytics Measurement Protocol can be attributed to the same session. We do not transmit your name, email address, password, or payment card data to Google Analytics.
6. Data Retention
We retain data for as long as needed to provide the service, maintain security, resolve disputes, and comply with law. You may request deletion subject to legal and operational constraints.
7. Security
We apply reasonable administrative, technical, and organizational safeguards. No system can guarantee absolute security.
8. Your Rights
Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your personal data.
9. Data Deletion
You may request deletion of your personal data and any data we have received from third-party platforms (including Meta/Facebook) at any time. To request deletion:
- Email kamal@delegated.to with the subject line "Data Deletion Request".
- Include the email address associated with your account.
- Specify whether you want a full account deletion or deletion of specific third-party platform data (e.g. Meta Ads data).
We will process your request within 30 days and confirm deletion by email. Upon deletion, we will remove your personal data, access tokens, campaign data, and any other platform data received from third-party services. Some data may be retained where required by law or for legitimate business purposes (e.g. fraud prevention, legal compliance).
10. Contact
Sanklad Digital Ltd.
7 Brookfields Place, Coventry, cv64qf
Email: kamal@delegated.to