Privacy Policy

Last updated: 6 May 2025

RXJS B.V. (“RXJS”, “we”, “us”) respects your privacy and is committed to protecting your personal data. This Policy explains how we collect, use, share and safeguard information when you:

  • download or use the Agent0 desktop application;
  • visit any web pages that host licensing or update services for Agent0;
  • purchase a licence through our billing partner Paddle.com; or

contact our support team.

For the purposes of the EU General Data Protection Regulation (“GDPR”), RXJS B.V., Lindekamp 3, 7721 VM, Netherlands (KvK 69071403) is the data controller for the processing described below. Email: [email protected]

1. What data we collect

CategoryExamplesSource
Account dataE‑mail address, password hash (if account created)You
Billing informationName, Email, company name, VAT ID (if applicable)Collected by Paddle
Licence & device dataLicence key, activation count, OS version, device hash, IP address, in‑app preferencesAgent0 app
Usage / telemetryCrash reports, feature‑usage countersAgent0 app
Payment dataOrder ID, last 4 digits of card, billing country, VAT rate, payment statusPaddle (see § 4)
Support recordsE‑mails, support chat transcripts, attachmentsYou

We do not receive or store full card numbers or bank details; these stay with Paddle. Also all requests you make to LLM providers are not stored or collected by RXJS.

PurposeLegal basis (GDPR Art. 6)
Create your account, issue licence keys, deliver updatesContract (Art. 6 (1)(b))
Process payments & send invoicesContract; legal obligation (tax laws)
Prevent piracy, fraud and misuseLegitimate interest (Art. 6 (1)(f))
Provide support & communicate changesContract; legitimate interest
Improve stability and features (anonymised telemetry)Legitimate interest; consent where required
Optional marketing e‑mailsConsent (Art. 6 (1)(a)) – opt‑in only

You can withdraw consent at any time via the unsubscribe link or app settings.

3. Retention

DataRetention period
Account & licence dataWhile account is active + 12 months
Payment / invoicing records7 years (Dutch tax law)
Telemetry & server logs90 days, then aggregated
Back‑upsMax 120 days, then deleted
Support tickets3 years after last interaction

4. Sharing & recipients

We share data only when necessary:

RecipientRoleSafeguard
Paddle.com Market Ltd. (UK) / Paddle.com Inc. (USA)Merchant of Record – processes all payments, performs fraud checksUK adequacy decision; SCC/Data‑Privacy‑Framework for US transfers
TransIP B.V. (NL)Run update, licence and backup serversEU/EEA datacentres
Use Splunk (US)Sends transactional e‑mailsSCCs if outside EEA
Sentry (US)Error tracking/analytics vendor (opt‑in)Data minimised & pseudonymised
Plausible Analytics (US)Website analyticsData minimised & pseudonymised

We will disclose information if required by law or to defend legal claims.

5. International transfers

Where data leaves the EEA we rely on:

UK adequacy regulations (for Paddle UK);

Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework (for Paddle Inc. and other US subprocessors);

additional technical measures such as encryption at rest and in transit.

6. Security

TLS 1.2+ encryption for all data in transit

AES‑256 encryption at rest

7. Your rights

Under the GDPR you can:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Erase data (“right to be forgotten”) in permitted cases
  • Restrict or object to certain processing
  • Port your data to another provider
  • Withdraw consent at any time (does not affect past processing)

To exercise any right, e‑mail [email protected] from the address linked to your account. We may ask for ID to verify the request. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.

8. Cookies & tracking

Our marketing website uses only:

Necessary cookies (session & CSRF)

Anonymous analytics cookies (Plausible, IP‑masked)

No cookies are set by the Agent0 desktop application.

9. Children

Agent0 is not directed to children under 16. We do not knowingly process children’s data.

10. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be announced via the app or e‑mail. Continued use of the Service after the effective date constitutes acceptance of the revised Policy.

11. Contact

RXJS B.V. Lindekamp 3, 7721 VM, Netherlands E‑mail: [email protected]