Privacy Policy

Effective: April 1, 2026

1. What We Collect

When you use AGIRA, we collect:

• Account information: name, email address, fund name, strategy type
• Writing samples: investor letters, market commentary, or other text you provide for voice calibration
• Usage data: which features you use, drafts you approve/reject/edit, and general interaction patterns
• Payment information: processed securely by Stripe; we do not store credit card numbers

2. How We Use Your Data

• Voice calibration: Your writing samples are used to train your personalized voice model within AGIRA
• Draft generation: Your profile data (strategy, allocator preferences) is used to generate relevant outreach drafts
• Product improvement: Aggregated, anonymized usage patterns help us improve the platform
• Communication: We send transactional emails (magic links, draft notifications) and occasional product updates

3. AI Processing and Third-Party Services

Your writing samples and profile data are processed by third-party AI services (currently OpenAI) to generate outreach drafts. We use OpenAI's API with the following protections:

• We use API endpoints that do not train on your data (per OpenAI's API data usage policy)
• Your data is transmitted over encrypted connections (TLS)
• We do not share your data with other AGIRA subscribers or any other third parties beyond what is necessary for the Service to function

You should be aware that AI-generated content involves sending your writing samples and preferences to external AI providers. If your firm has restrictions on sharing proprietary information with third-party AI services, please review this with your compliance team before using AGIRA.

4. Data Storage and Security

• Account and usage data is stored in Supabase (hosted on AWS) with row-level security policies
• Data is encrypted in transit (TLS) and at rest
• Each subscriber's data is isolated at the database level (tenant isolation)
• Payment processing is handled entirely by Stripe (PCI DSS compliant)

5. Data Retention

We retain your data for as long as your account is active. Upon cancellation:

• Your account data is retained for 90 days in case you wish to reactivate
• After 90 days, your data is permanently deleted upon written request
• Aggregated, anonymized data may be retained for product analytics

6. Your Rights

You may at any time:

• Request a copy of all data we hold about you
• Request deletion of your data
• Update or correct your account information
• Opt out of non-essential communications

To exercise these rights, email sri@dreamseekersacademy.com.

7. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email to active subscribers at least 30 days before taking effect.

9. Contact

Privacy questions: sri@getagira.com