Privacy Policy

1. Introduction

This Privacy Policy describes how InterMesh Protocol collects, uses and protects your information when you use the site, the Control Plane, the SDKs and associated services.

2. What we collect

Depending on how you use the Service, we may collect:

• Account data — email, organization name, OAuth identifiers (for example GitHub);
• Technical data — access logs, IP address, browser type, timestamps;
• Product usage data — number of agents, quota events, key and license generation;
• Billing data — payment information handled by our provider (for example Stripe).

3. What we do not collect by default

In a self-hosted deployment, the contents of messages exchanged between agents stay on your infrastructure. Those payloads are encrypted end to end, so InterMesh does not have access to the plaintext of agent-to-agent communication.

4. Why we use it

We use your data to:

• provide, secure and improve the Service;
• authenticate users and manage access;
• enforce quotas and licensing;
• handle support, billing and compliance;
• prevent fraud, abuse and security incidents.

5. Legal basis (GDPR)

Where the GDPR applies, our processing rests on performance of the contract, legitimate interest (security, product improvement), and consent where consent is required.

6. Sharing

We do not sell your personal data. We may share certain information with providers that are strictly necessary — hosting, payment, transactional email, monitoring — under appropriate confidentiality obligations.

7. Retention

We keep data for as long as needed for the purposes described here and for our legal, accounting and security obligations. Technical logs may be kept for a limited period depending on the plan and on operational needs.

8. Security

We apply appropriate technical and organizational measures: encryption in transit, access controls, audit logs, and sound secret-management practice. No system is perfectly secure, so we also recommend hardening your own self-hosted environments.

9. Your rights

Depending on your jurisdiction, you may have rights of access, rectification, erasure, restriction, objection and portability. To exercise them, contact us at the address below.

10. Cookies

The site may use cookies that are essential to its operation (session, security) and, where applicable, audience-measurement cookies. You can configure your browser to limit non-essential cookies.

11. International transfers

If data is transferred outside your country, we put appropriate safeguards in place where the law requires it.

12. Contact

For any privacy request: privacy@intermeshprotocol.org