Privacy Policy

1. Who we are

PM Agent Chain (the "Service") is operated under the brand name "PM Agent Chain" by Guy Kushnir, an individual providing the Service personally (the "Company", "we", "us", or "our"). This Privacy Policy describes how we collect, use, store, and protect personal information when you use the Service at pmagentchain.com.

This Privacy Policy applies to all users of the Service, including invite-only users, self-serve users (when available), and reseller partners.

For privacy-related questions, contact: guy@pmagentchain.com

2. Information we collect

2.1 Information you provide directly

2.2 Information collected automatically

2.3 Generated content

When you run a project analysis, the Service generates output documents, executive summaries, and knowledge base entries based on your project briefs. This Service Output is considered part of your data and is treated accordingly.

3. How we use your information

We use the information we collect for the following purposes:

3.1 To provide the Service

• Process project briefs through the agent chain and return analysis outputs
• Store your project documents and make them accessible to you
• Maintain your account and enable authentication
• Deliver features such as the knowledge base, executive summary, and document library

3.2 To operate and improve the Service

• Monitor Service performance and detect technical issues
• Analyze aggregate, anonymized usage patterns to improve user experience
• Prevent fraud, abuse, and unauthorized access
• Comply with legal obligations and enforce our Terms of Service

3.3 To communicate with you

• Send Service-related notifications (account changes, security alerts, feature updates)
• Respond to your support requests
• Send promotional communications (only with your consent, and you can opt out at any time)

4. Legal basis for processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, Switzerland, or other jurisdictions with comprehensive data protection laws, we process your personal data on the following legal bases:

5. Sharing your information

We share your information only in the following limited circumstances:

5.1 With service providers

We use third-party service providers to operate the Service. These providers process personal data on our behalf under data processing agreements that require them to maintain confidentiality and security. Categories of service providers include:

• AI language model providers (for running the agent chain)
• Cloud infrastructure and database providers (for hosting and data storage)
• Web hosting and content delivery providers (for serving the website)
• Authentication providers (for secure login, including Google OAuth when selected)
• Observability and monitoring providers (for operational visibility)
• Analytics providers (for anonymized usage statistics)
• Email service providers (for transactional emails)

We select service providers based on their security posture, data protection practices, and compliance with applicable laws. We maintain Data Processing Agreements (DPAs) with our providers as required.

5.2 With your consent

We may share your information with third parties when you explicitly direct us to do so (for example, when you request integration with an external tool).

5.3 For legal reasons

We may disclose information when required by law, subpoena, court order, or other legal process, or when we believe disclosure is necessary to:

• Comply with legal obligations
• Protect the rights, property, or safety of the Company, users, or the public
• Enforce our Terms of Service
• Investigate fraud or security incidents

5.4 Business transfers

If the Service is acquired, merged, or transferred to another entity, your information may be transferred as part of that transaction. You will be notified in advance and offered the ability to close your account if you do not wish for your data to be transferred.

6. International data transfers

The Service is operated from Israel. Your personal data may be transferred to and processed in countries outside your country of residence, including Israel, the United States, the European Union, and other locations where our service providers operate.

When transferring personal data from the EEA, UK, or Switzerland to countries without an adequacy decision, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions (Israel has an adequacy decision with the EU)
• Other lawful transfer mechanisms as appropriate

You can request a copy of the safeguards in place by contacting us at guy@pmagentchain.com.

7. Data retention

7.1 Active account data

While your account is active, we retain your data to provide the Service:

• Account information: For the duration of your account
• Project briefs and Service Output: For the duration of your account, or until you delete them
• Communications: For 3 years from the date of communication

7.2 After account closure

When you close your account:

• Active data is scheduled for deletion within 90 days of account closure
• Backups containing residual data may be retained for up to an additional 90 days before being overwritten in standard backup rotation
• Anonymized aggregate data (with no identifiers) may be retained indefinitely for operational analytics
• Data that we are legally required to retain (for tax, accounting, or legal compliance) is retained for the period required by law

7.3 Legal holds

If we receive a legal hold or preservation order, we may retain data beyond these periods as required to comply with legal obligations.

8. Your rights

Depending on your location, you have the following rights regarding your personal data:

8.1 Universal rights (all users)

• Right to access: Request a copy of your personal data
• Right to correction: Ask us to correct inaccurate information
• Right to deletion: Ask us to delete your data (subject to legal retention requirements)
• Right to opt out of marketing: Unsubscribe from promotional emails at any time

8.2 Additional rights under GDPR (EEA, UK, Switzerland)

• Right to restrict processing: Ask us to limit how we use your data
• Right to data portability: Receive your data in a machine-readable format
• Right to object: Object to processing based on legitimate interest
• Right to withdraw consent: Withdraw consent at any time (without affecting prior processing)
• Right to lodge a complaint: File a complaint with your local data protection authority

8.3 How to exercise your rights

To exercise any of these rights, email guy@pmagentchain.com with your request. We will respond within 30 days. We may ask you to verify your identity before processing certain requests.

8.4 Automated decision-making

The Service uses AI agents to analyze project briefs and generate outputs. These analyses are informational and advisory. The Service does not make legally significant automated decisions about you as an individual.

9. Security

We implement technical and organizational measures to protect your personal data, including:

• Encryption in transit (TLS/HTTPS) for all data transmitted to and from the Service
• Encryption at rest for data stored in our database and file storage
• Access controls limiting who can access your data internally
• Row-level security in our database to prevent cross-account data access
• Invite-only access controls during initial launch phase
• Rate limiting and input validation to prevent abuse
• Regular security reviews and updates

Despite these measures, no internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security of your data. In the event of a data breach that affects your personal data, we will notify you as required by applicable law.

10. Cookies and tracking

We use cookies and similar technologies for the following purposes:

10.1 Essential cookies

Required for the Service to function. These cannot be disabled.

• Session cookies for authentication and login state
• Security cookies to prevent fraud and protect your account

10.2 Functional cookies

Remember your preferences and settings.

• UI preferences (dark mode, language)
• Recently viewed projects

10.3 Analytics cookies

Help us understand how the Service is used so we can improve it.

• Anonymized pageview and event data
• Aggregate usage statistics

You can manage cookies through your browser settings. Note that disabling essential cookies will prevent you from using the Service.

11. Children’s privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact guy@pmagentchain.com and we will delete the data promptly.

12. Third-party links

The Service may contain links to third-party websites or services. This Privacy Policy does not apply to those third parties. We encourage you to read the privacy policies of any third-party services you access.

13. Changes to this privacy policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Service features. Material changes will be communicated to you by email or through a notice on the Service at least 14 days before they take effect.

The "Last updated" date at the top of this Privacy Policy indicates when the current version became effective. We encourage you to review this Privacy Policy periodically.

14. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

For EU residents: If we are not able to resolve your concern, you have the right to lodge a complaint with your local data protection authority. A list of authorities is available at edpb.europa.eu.