Privacy Policy
Last Updated: November 15, 2025
1. Introduction
Partitura ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our multi-agent AI orchestration platform.
2. Information We Collect
2.1 Information You Provide
- Account Information: When you sign in via OAuth (GitHub, Google), we receive your name, email address, and profile picture from the authentication provider.
- Payment Information: Payment details are processed by Stripe. We do not store your full credit card information on our servers.
- Project Data: Code, configurations, and content you create or upload to the platform.
- AI Agent Configurations: Settings, preferences, and instructions you provide for AI agents.
2.2 Automatically Collected Information
- Usage Data: Information about how you interact with the Service, including features used, actions taken, and time spent.
- Device Information: Browser type, operating system, IP address, and device identifiers.
- Log Data: Server logs, error reports, and performance metrics.
- Cookies: We use cookies and similar tracking technologies to maintain your session and improve user experience.
3. How We Use Your Information
We use the collected information for:
- Providing, maintaining, and improving the Service
- Processing payments and managing subscriptions
- Authenticating users and maintaining account security
- Running AI agents and processing your code/content
- Communicating with you about updates, security alerts, and support
- Analyzing usage patterns to improve performance and features
- Detecting and preventing fraud, abuse, and security incidents
- Complying with legal obligations
4. Data Sharing and Disclosure
4.1 Third-Party Service Providers
We share data with trusted partners who help us operate:
- Authentication: GitHub and Google for OAuth authentication
- Payment Processing: Stripe for payment and subscription management
- AI Providers: OpenAI, Anthropic, Google, and other AI model providers for running your agents
- Hosting: Vercel for web hosting and Fly.io for backend infrastructure
- Storage: Vercel Blob and Vercel Postgres for data storage
4.2 Legal Requirements
We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.
4.3 Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
4.4 With Your Consent
We may share your information for other purposes with your explicit consent.
5. Data Security
We implement industry-standard security measures to protect your data:
- Encryption in transit (HTTPS/TLS) and at rest
- Secure authentication using OAuth 2.0
- Regular security audits and monitoring
- Access controls and principle of least privilege
- Secure infrastructure provided by Vercel and Fly.io
However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
6. Data Retention
Account Data: We retain your account information for as long as your account is active or as needed to provide services.
Project Data: Your projects, code, and configurations are retained until you delete them or close your account.
Backup Data: Backups may be retained for up to 90 days after deletion for disaster recovery purposes.
Legal Retention: Some data may be retained longer if required by law or for legitimate business purposes (e.g., dispute resolution, fraud prevention).
7. Your Rights and Choices
Depending on your location, you may have the following rights:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data (right to be forgotten)
- Portability: Request a copy of your data in a machine-readable format
- Objection: Object to processing of your data for certain purposes
- Restriction: Request restriction of processing in certain circumstances
- Withdraw Consent: Withdraw consent for data processing where consent was the basis
To exercise these rights, contact us at support@partitura-ai.com
8. AI and Data Processing
AI Provider Processing: When you use AI agents, your prompts and code are sent to third-party AI providers (OpenAI, Anthropic, Google, etc.). Each provider has their own data processing practices and privacy policies.
Training Data: We do not use your private code or projects to train AI models without explicit consent. However, third-party AI providers may have their own policies regarding data usage.
AI-Generated Content: You retain ownership of AI-generated code and content. We process this data only to provide the Service.
9. Cookies and Tracking
We use the following types of cookies:
- Essential Cookies: Required for authentication and core functionality
- Functional Cookies: Remember your preferences and settings
- Analytics Cookies: Help us understand how you use the Service
You can control cookies through your browser settings. Note that disabling cookies may affect Service functionality.
10. International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.
11. Children's Privacy
Our Service is not intended for users under 13 years of age (or 16 in the EU). We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.
12. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
- Right to know what personal information is collected, used, shared, or sold
- Right to delete personal information held by businesses
- Right to opt-out of sale of personal information (we do not sell your data)
- Right to non-discrimination for exercising CCPA rights
13. European Privacy Rights (GDPR)
If you are in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR), including those listed in Section 7 above. Our legal basis for processing includes:
- Contract performance (providing the Service)
- Legitimate interests (improving and securing the Service)
- Your consent (for certain processing activities)
- Legal obligations (compliance with laws)
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use after changes constitutes acceptance of the updated policy.
15. Contact Us
For privacy-related questions or to exercise your rights, contact us at:
Email: support@partitura-ai.com
By using Partitura, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.