Privacy Policy
Last updated: September 14, 2026
This Privacy Policy describes how ApolloCode Inc. (“ApolloCode”, “we”, “us”) collects, uses, and shares personal information when you use Central Intelligence (the “Service”). Central Intelligence is operated by ApolloCode Inc., located at 204B-747 boul. Pierre-Roux Est, Victoriaville, QC G6T 1S7, Canada.
1. Who is responsible
ApolloCode Inc. is the organization responsible for personal information processed through the Service. For privacy requests, contact privacy@apollocode.ca or write to us at the address above.
2. Information we collect
We collect account information you provide (such as name, email address, and authentication details); workspace content you upload or create (including agents, knowledge documents, tool configurations, and conversation or execution data); usage and billing data (including token usage, plan status, and payment-related identifiers processed by Stripe); technical and security logs (such as IP address, device or browser type, and session metadata); and communications you send us (support requests or product feedback).
3. Sources of information
We collect information directly from you, from your workspace members when they use the Service, from authentication providers you choose (for example Google sign-in via Firebase Authentication), and from service providers that help us operate the platform (hosting, email delivery, analytics limited to operations, and payment processing).
4. How we use information
We use personal information to provide, secure, and improve the Service; authenticate users and manage workspaces; process agent runs and tool calls you configure; send transactional email (verification codes, invites, billing or usage alerts); process subscriptions and invoices; prevent abuse and investigate incidents; and comply with applicable law. We do not sell your personal information.
5. Service providers and processors
We rely on trusted processors to operate Central Intelligence, including Firebase Authentication (identity), MongoDB and related hosting infrastructure (data storage), large language model providers you or we configure for agent runs (for example OpenAI, Anthropic, Google, or OpenRouter), Stripe (payments), and Brevo or similar providers (transactional email). These providers process data only as needed to deliver their services under appropriate contractual safeguards.
6. AI processing
When you run an agent, prompts, tool results, and related workspace content may be sent to the model provider selected for that run so the agent can complete its task. Do not submit sensitive personal information to agents unless you have a lawful basis and appropriate safeguards. Model providers process content according to their terms and your (or our) commercial arrangement with them.
7. Retention
We retain account and workspace data for as long as your account remains active and as needed to provide the Service. We may retain limited records after closure for security, dispute resolution, billing, and legal compliance. You may request deletion of your account and associated personal information subject to legal retention requirements.
8. Your rights
Depending on applicable law (including Québec’s Act respecting the protection of personal information in the private sector and other Canadian privacy laws), you may have the right to access, correct, or delete personal information, withdraw consent where processing is consent-based, and lodge a complaint with a supervisory authority. To exercise these rights, email privacy@apollocode.ca. We will respond within the timeframes required by law.
9. Cookies and similar technologies
We use essential cookies and similar storage to keep you signed in, remember your language preference, and protect sessions. These are required for the Service to function. We do not use third-party advertising cookies on the marketing or product surfaces described here.
10. International transfers
ApolloCode is based in Québec, Canada. Some processors may store or process data in other countries. Where required, we use contractual and organizational measures appropriate to the transfer.
11. Security
We implement administrative, technical, and organizational measures designed to protect personal information, including encrypted transport, access controls, and least-privilege practices for workspace data. No method of transmission or storage is completely secure; please use strong credentials and limit sharing of workspace invites.
12. Children
The Service is intended for business use by adults. We do not knowingly collect personal information from children.
13. Changes
We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Continued use of the Service after changes become effective constitutes acceptance of the updated policy where permitted by law.
14. Contact
ApolloCode Inc., 204B-747 boul. Pierre-Roux Est, Victoriaville, QC G6T 1S7, Canada. Email: privacy@apollocode.ca.