Privacy Policy

This Privacy Policy explains the manner in which Command Intelligence Center handles personal data when you visit cis.commandintelligencecenter.com, purchase, and/or use the Service. This Privacy Policy does not govern your own workspace or AI Provider, which may have their own policies. Defined terms have the meanings as provided in the Terms of Service.

In order to provide the Service, the Company may collect the following information:

Account & contact data: name, email, business name, time zone, and jurisdiction.

Payment data: processed by our payment processor (Stripe); the Company receives limited payment details and does not store full card numbers.

Community & support data: posts, messages, and requests you send to us or the community platform.

Usage & operational metadata: activation status, plan, Agent counts, token/usage metrics, trial expiry, and technical logs used to run and secure the Service.

When your Agents run, your workspace Content (messages, files) is processed only in the moment by the Company’s Connector to generate a response. The Content is not retained by Command Intelligence Center and is not reviewed by the Company’s personnel. The Company stores operational metadata and not your conversation Content. Your Content and your AI Provider usage remain in your own workspace and AI Provider account.

The Company uses your information to: provide, secure, bill, and support the Service; send service and trial-expiry notifications; operate the community; to comply with law; and, with your consent and where required, send marketing. Legal bases where GDPR/UK GDPR applies: contract performance, legitimate interests, consent, and legal obligation.

In order to operate the Service, the Company shares limited data with vendors and other third-parties, including but not limited to: Stripe (payment processing); Slack (the workspace you connect and control); Anthropic / OpenAI (AI model provider — for trial/managed keys; BYOK uses your own account); Supabase (application hosting and metadata storage). The Company does not sell your personal information. The Company may be required to disclose information in order to comply with applicable law or to protect the rights and safety of third parties.

The Company may process data in the United States and other countries. Where required, the Company relies on appropriate and/or required safeguards, including but not limited to, Standard Contractual Clauses.

The Company retains account, billing, and metadata for as long as reasonably needed in order to provide the Service and for legal requirements. When information is no longer needed, the Company deletes or otherwise anonymizes it. The Company uses administrative, technical, and organizational safeguards, including encryption in transit and at rest, secrets management for Keys and tokens, per-customer isolation, and access controls.

You may have rights to: access, correct, delete, port, or restrict your personal data, object to certain processing, and withdraw consent. To exercise any rights, email hello@commandintelligencecenter.com.

The Company sends marketing information only where permitted. The Company honors opt-outs (and, where required, obtains consent — including consent for SMS).

The Service is not intended for or allowed to be used by minors. The Company does not knowingly collect data from anyone under the age of eighteen (18) years.

The Company may update this Privacy Policy. You will be notified of any material changes and the effective date for the implementation of those changes.

For more information contact: hello@commandintelligencecenter.com.