← Back to OC Service

Privacy Policy

Last updated: July 2026 · OC Service operated by Spore AI

1. What We Collect

We collect the minimum data necessary to operate the Service:

• Account info: Email address and hashed password.
• Agent config: Agent name, model selection, soul description, and messaging platform identifiers (Telegram user ID, Matrix user ID).
• API credentials: Your AI provider API key, bot token, and access tokens — stored encrypted at rest (AES-256-GCM).
• Billing: Transaction records and cryptocurrency deposit addresses.

2. What We Do NOT Collect

• We do not log, store, or read your conversations with your AI agent.
• We do not track your browsing behavior or use analytics cookies.
• We do not share or sell your data to third parties.

3. How Your Data Is Protected

• Sensitive credentials are encrypted at rest using AES-256-GCM.
• Each agent runs in an isolated virtual machine — no cross-tenant data access.
• Conversations flow directly between your messaging platform and your AI provider. We are not in the data path.
• Passwords are hashed with bcrypt.

4. Data Retention

Your data is retained while your account is active. When you delete an agent, its VM and all associated data are permanently destroyed. Account deletion removes all stored data.

5. Third Parties

Your AI provider (e.g., Anthropic) processes your conversations under their own privacy policy. We do not control their data handling. We recommend reviewing their policies.

6. Your Rights

You may request export or deletion of your account data at any time by contacting us. You can delete individual agents and their data directly from the dashboard.

7. Changes

We may update this policy. Material changes will be communicated via email or dashboard notice.

8. Contact

Privacy questions? Contact [email protected].