Privacy Policy
This Privacy Policy explains how psquared GmbH ("we", "us", "our") collects, uses, and protects your personal data when you use psquared AgentHub. We are committed to transparency and compliance with the GDPR and the EU AI Act.
1. Data Controller
The data controller for psquared AgentHub is:
psquared GmbH
Dametzstraße 2-4
4020 Linz
Austria
Founders: Martin Pammesberger, Manuel Pils
Email: office@psquared.dev
2. Data We Collect
- Account information (name, email, company, etc.)
- Usage data (agent activity, chat logs, tool usage, billing info)
- API input/output (including user-generated tool data)
- Metadata (IP address, device/browser info, timestamps)
- Data flagged as 'sensitive' by users (strongly encrypted)
We do not intentionally collect special categories of personal data unless you provide or flag it as such.
3. How We Use Your Data
- To provide, maintain, and improve psquared AgentHub
- To process billing and manage subscriptions
- To enable agent and tool functionality
- To ensure security and prevent abuse
- To comply with legal obligations
- To analyze usage for product improvement (aggregated/anonymous)
4. AI and Automated Decision-Making
Some features (e.g., chat resolution, data flagging) are powered by AI. Automated decisions are made in accordance with the EU AI Act. Users have the right to request human review of AI decisions and to receive explanations of automated outcomes.
Personal data collected by chat agents is not sent to the LLM layer to minimize data exposure.
5. Data Retention
- Chats are deleted automatically 60 days after their last message (adjustable for higher tiers).
- API input flagged as 'sensitive' is strongly encrypted and subject to stricter retention.
- Billing and account data is retained as required by law.
6. Data Sharing and Third Parties
- We do not sell your personal data.
- We share data only with trusted processors (e.g., Supabase, Stripe) as necessary to provide the service.
- Users may create tools that send data to third-party APIs; psquared GmbH is not responsible for third-party data handling.
- All processors are contractually bound to GDPR-compliant data protection standards.
7. Your Rights
- Right to access, rectify, or erase your data
- Right to restrict or object to processing
- Right to data portability
- Right to withdraw consent at any time
- Right to lodge a complaint with the Austrian Data Protection Authority
- Right to request human review of AI decisions
To exercise your rights, contact us at office@psquared.dev.
8. Data Security
We implement industry-standard security measures, including encryption, access controls, and regular audits. Sensitive data flagged by users is strongly encrypted. No method of transmission is 100% secure, but we strive to protect your data to the highest standard.
9. Changes to this Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or in-app notification. Continued use of psquared AgentHub after changes constitutes acceptance.
10. Contact
psquared GmbH
Dametzstraße 2-4
4020 Linz
Austria
Founders: Martin Pammesberger, Manuel Pils
Email: office@psquared.dev
2. Infrastructure, APIs, and Hosting
- Heroku (EU): Hosting for psquared AgentHub.
- Supabase (EU): Database, user authentication (cookie-based), and file storage (images, logos). Sensitive data is highly encrypted.
- Stripe: Payment provider. Stripe cookies may store address and credit card data. psquared does not store credit card data directly.
- OpenAI: Used for LLM (AI) features. No user data is retained or used for training by OpenAI.
For enterprise customers, we offer the option to host open source LLMs within the EU for maximum data sovereignty and compliance.
11. EU AI Act Compliance
psquared AgentHub is committed to compliance with the EU AI Act. We ensure transparency, human oversight, and risk management for all AI-driven features. Users are informed when AI is used for automated decision-making and can request human review. We regularly assess and document AI risks and maintain clear records as required by the Act.