Privacy Policy

Walli-AI, LLC ("Walli-AI", "we", "us"), a Wyoming limited liability company, provides an AI agent platform that helps individuals and small teams automate routine work. This policy explains what information Walli-AI collects when you use the service, how we use it, and how to exercise your rights. It is part of, and should be read together with, our Terms of Service.

1. Information we collect

We collect three categories of information:

• Account data: your email address, hashed authentication credentials, billing details, the configuration choices you make for each agent (occupation, skills, instructions), and a record of your acceptance of the Terms of Service (version and timestamp).
• Connected service data: when you authorize Walli-AI to access a third-party service (e.g. Gmail, Google Calendar, Slack, Discord), Walli-AI stores OAuth access and refresh tokens for that service so your agent can act on your behalf. Walli-AI only requests the scopes you explicitly grant during the connect flow.
• Operational data: logs of your agent's activity (prompts, tool calls, results), errors, and usage metrics. These are used to operate, debug, and improve the service.

2. How we use information

• To operate the service and execute the workflows you configure.
• To authenticate you and bill your subscription.
• To respond to inquiries you send us.
• To diagnose problems and improve reliability; internal logs are accessed by Walli-AI engineering only and are retained no longer than 90 days.

We do not use your content or your agents' outputs to train AI models, and we do not sell your personal information.

3. How information is shared

We share information only with the service providers needed to operate Walli-AI, and only to the extent required:

• Cloud and AI infrastructure: the service runs on Amazon Web Services, and agent requests are processed by third-party AI models (such as Anthropic Claude via AWS Bedrock, or a model provider you configure with your own API key).
• Payments: billing is handled by Stripe; Walli-AI does not store your full card details.
• Connected services you authorize: your agents transmit data to and from the third-party services you connect, under your direction.
• Legal requirements: we may disclose information if required by law, subpoena, or to protect the rights, safety, or property of Walli-AI or others.

4. Google user data (Limited Use disclosure)

When you connect a Google account, Walli-AI accesses only the Google user data needed for the features you enable: Gmail messages, labels, and drafts (to triage mail, apply labels, and prepare drafts for your review — Walli-AI does not send email on your behalf), Google Calendar events (to read and manage your schedule), and Google Drive files (to read and update documents your agent works with). This data is used solely to provide those user-facing features, is never used for advertising, is never sold, and is not used to train AI or machine-learning models. Humans do not read this data except with your explicit permission, where required for security or legal compliance, or in aggregated, anonymized form for internal operations.

Walli-AI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Retention and deletion

• Account data is retained for the lifetime of your subscription.
• OAuth tokens are deleted when you disconnect a service from your agent or when the refresh token is revoked. Abandoned tokens (no use within 90 days) are auto-deleted.
• Operational logs are retained for up to 90 days, then deleted via TTL.
• You can request full deletion of your account and all associated data at any time by emailing the address in §8.

6. Security

We use industry-standard safeguards (encryption in transit and at rest, tenant isolation, least-privilege access) to protect your information. No system is perfectly secure, and as described in the Terms of Service we cannot guarantee the security of any information you transmit to or store with the service.

7. Your rights

Depending on your jurisdiction, you may have rights under GDPR, CCPA, or similar regulations to access, correct, or delete personal information Walli-AI holds about you. Contact us at the address in §8. The service is not directed to anyone under 18, and we do not knowingly collect information from them.

8. Contact

Questions or requests: support@walli-ai.ai

9. Changes

We may update this policy from time to time. Material changes will be communicated to active users by email. The date at the top of this page reflects the most recent revision.