Privacy Policy | Gouvernail

This document is provided for informational purposes and does not constitute legal advice. Consult qualified counsel for your specific situation.

1. Introduction

Slyseed, Inc. (“Slyseed,” “we,” “us,” or “our”) operates Gouvernail at gouvernail.ai. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and the choices available to you. It applies to our website, dashboard, and messaging channels (SMS and WhatsApp).

By using Gouvernail, including signing in at /login, you acknowledge this Privacy Policy and our Terms of Service.

2. Information We Collect

Account and identity

Phone number— collected for OTP login and messaging; stored encrypted (AES-256-GCM) with a hashed value for lookup
Account metadata— account slug, plan/tier status, free-tier usage, invite relationships, and admin flags where applicable
Authentication tokens— JWT access tokens (client-side session) and hashed refresh tokens; session cookies for web login

Project and agent data

GitHub connection— OAuth tokens or personal access tokens you provide, stored encrypted, used to clone, branch, commit, and open pull requests at your direction
API keys— provider keys you optionally supply (e.g., Anthropic, OpenAI); stored encrypted; used via our auth proxy so agent containers never receive raw credentials
Chat and prompts— messages sent via web or WhatsApp/SMS; chat bodies may be encrypted at rest when project encryption is enabled
Work units and agent logs— task descriptions, status, branch names, PR URLs, container metadata, audit/journal entries, and safety-screening records for free-tier prompts
Project memory— CLAUDE.md-style project context you maintain in the dashboard

Technical and usage data

IP address, browser type, device information, and request logs for security, rate limiting, and operations
Cookies and similar technologies on our web properties (see Section 10)

3. How We Use Information

We use personal information to:

Provide, operate, and maintain the Service
Authenticate you and secure your account
Send transactional SMS/WhatsApp messages (OTP, status, HITL approvals)
Run AI agents in sandboxes on your behalf
Sync with GitHub and deploy previews as you direct
Enforce usage limits, safety screening, and abuse prevention
Comply with law and respond to lawful requests
Improve reliability and fix bugs (aggregated/anonymized where feasible)

We do not use your phone number for unrelated marketing without separate consent where required by law.

4. SMS, WhatsApp, and Messaging Consent (TCPA)

When you sign in and verify your phone number on /login, you provide express written consent to receive automated and manual text messages from Gouvernail at the number you provide, including via SMS and WhatsApp. Messages are primarily transactional: login codes, work-unit notifications, human-in-the-loop approval requests, and account-related alerts.

Consent is not a condition of purchase where prohibited. Message frequency varies with your usage. Message and data rates may apply. Reply STOP to opt out of non-essential messages; reply HELP for help. Opting out may limit phone-based features.

5. Email and CAN-SPAM

If we send email, transactional messages (receipts, security alerts, account notices) do not require an unsubscribe link under CAN-SPAM, but you may contact us to update preferences. Any commercial or promotional email will include a clear identification as an advertisement where required, our physical address, and an opt-out mechanism. We honor opt-out requests promptly and do not require login to unsubscribe from marketing email.

6. How We Share Information

We do not sell your personal information. We share information only as described below:

Service providers who process data on our behalf under contract, including Twilio (SMS/WhatsApp), Amazon Web Services (hosting, storage, compute), and payment processors if you subscribe
AI providers you authorize— when you use platform or BYOK credentials, prompts and code context are transmitted to providers such as Anthropic or OpenAI to generate responses. Their policies govern that processing.
GitHub— when you connect a repository, we use your token to interact with GitHub APIs at your direction
Legal and safety— when required by law, to protect rights and safety, or to investigate abuse
Business transfers— in connection with a merger, acquisition, or asset sale, subject to continued protection

7. Security

We implement administrative, technical, and organizational measures including encryption at rest for sensitive fields (phone numbers, tokens, chat), hashed refresh tokens, rate limiting, sandbox isolation for agents, and access controls. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

8. Data Retention

We retain information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Agent logs, audit records, and prompt safety reviews may be retained for operational and compliance purposes. Encrypted data is deleted or anonymized when no longer required, subject to backup retention cycles.

You may request deletion as described in Sections 9 and 10. Some data may persist in backups for a limited period or where retention is required by law.

9. Your Rights — California (CCPA/CPRA)

If you are a California resident, you may have the following rights under the California Consumer Privacy Act, as amended by the CPRA:

Right to know— categories and specific pieces of personal information collected, sources, purposes, and recipients
Right to delete— request deletion of personal information we collected from you, subject to exceptions
Right to correct— request correction of inaccurate personal information
Right to opt out of sale/share— we do not sell personal information; we do not share it for cross-context behavioral advertising
Non-discrimination— we will not discriminate against you for exercising privacy rights

To submit a request, email privacy@gouvernail.aiwith “California Privacy Request” in the subject line. We will verify your identity before fulfilling requests. You may designate an authorized agent where permitted by law.

10. Your Rights — Texas (TDPSA)

If you are a Texas resident, the Texas Data Privacy and Security Act (TDPSA) may provide you with rights including:

Confirm whether we process your personal data
Access personal data we hold about you
Correct inaccurate personal data
Request deletion of personal data you provided
Obtain a portable copy of personal data you provided, where technically feasible
Opt out of targeted advertising, sale of personal data, and certain profiling — we do not sell personal data or engage in targeted advertising as defined by TDPSA

Submit Texas privacy requests to privacy@gouvernail.aiwith “Texas Privacy Request” in the subject line. We will respond within the timeframes required by applicable law after verifying your identity.

11. Other U.S. Privacy Rights

Residents of other states with comprehensive privacy laws may have similar rights. Contact us at privacy@gouvernail.ai and we will honor applicable rights consistent with law.

12. Cookies and Similar Technologies

We use essential cookies for authentication (e.g., refresh-token cookies for web sessions) and security. We may use minimal analytics to understand site usage. You can control cookies through browser settings; disabling essential cookies may prevent sign-in.

13. Children's Privacy

Gouvernail is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us information, contact privacy@gouvernail.ai and we will delete it promptly.

14. International Users

Gouvernail is operated from the United States. If you access the Service from outside the U.S., you consent to processing and storage in the U.S., which may have different data protection laws than your jurisdiction.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the effective date. Material changes may be communicated through the Service where appropriate. Continued use after changes become effective constitutes acknowledgment.

16. Contact Us

Slyseed, Inc.
1748 Ohlen Rd
Austin, TX 78757
United States

Privacy inquiries and rights requests: privacy@gouvernail.ai
General legal: legal@gouvernail.ai