Privacy Policy

This Privacy Policy describes how Arlington Labs, Inc. ("Arlington Labs," "we," "us," or "our") collects, uses, and shares information when you use Pentagon (the "Software" or "Service"). We are committed to protecting your privacy and being transparent about our data practices.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Authentication Data: Username, email address, and avatar URL (via GitHub OAuth)
• Profile Information: Display name and account preferences

1.2 Messages and Agent Data

Pentagon is a cloud-based platform. When you use the Service, we collect and store:

• Messages: All messages you send to your agents and all responses your agents generate
• Agent Reports: Status updates, memory entries, and task history produced by your agents
• Workspace Data: Map configurations, team structures, channel contents, and agent settings

1.3 What We Do Not Collect

We do not store your source code, documents, or other files. Agents interact with your files locally or through version control systems you configure. The contents of your folders are never uploaded to or stored on our servers.

1.4 Technical Information

When you visit our website or use Pentagon, we may collect:

• IP address (anonymized for analytics)
• Device type and operating system
• Browser type and version
• Usage patterns (aggregated and anonymized)

2. How We Use Information

We use the information we collect to:

• Provide the Service: Deliver, maintain, and operate Pentagon, including storing and relaying messages between you and your agents
• Authenticate Users: Verify your identity and manage your account
• Improve Pentagon: Understand usage patterns to improve the Software (aggregated, anonymized data only)
• Communicate: Send important updates about Pentagon (if you opt in)
• Prevent Abuse: Detect and prevent fraudulent or malicious activity

3. How AI Models Work with Pentagon

Pentagon connects your agents to AI model providers (such as Anthropic) to power their responses. When you send a message to an agent:

• Your message is sent through our servers to the AI model provider
• The AI model provider processes the request and returns a response
• Both the message and response are stored on our servers as part of your conversation history
• The AI model provider's own data retention and privacy policies apply to their processing of your requests

See Anthropic's Privacy Policy for details on how they handle data sent through their API.

4. Information Sharing and Disclosure

We do not sell your personal information. We do not share your data for targeted advertising. We may share information only in the following circumstances:

4.1 Service Providers

We use the following third-party services to operate Pentagon:

• Supabase: Database and authentication infrastructure
• GitHub: OAuth authentication provider
• Vercel: Website and application hosting
• AI Model Providers: Processing agent requests (e.g., Anthropic)

These providers process data only on our behalf and are contractually obligated to protect your information.

4.2 Legal Requirements

We may disclose information if required by law, regulation, or legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

4.3 Business Transfers

If Arlington Labs is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Data Retention

• Messages and Agent Data: Retained while your account is active; deleted within 30 days of account deletion
• Account Information: Retained while your account is active; deleted within 30 days of account deletion
• Analytics Data: Aggregated and anonymized; retained for up to 2 years

6. Your Rights and Choices

6.1 Access and Portability

You can access your data at any time through Pentagon. You may request an export of your data by contacting us.

6.2 Correction

You can update your account information through the Pentagon settings or by contacting us.

6.3 Deletion

You can delete your account and all associated data by contacting us at privacy@pentagon.run.

7. Security

We implement appropriate technical and organizational measures to protect your information:

• Data encryption in transit (TLS/HTTPS)
• Data encryption at rest in our databases
• Regular security audits and updates
• Access controls and authentication for all systems

However, no method of transmission or storage is 100% secure. If you believe your account has been compromised, please contact us immediately.

8. Children's Privacy

Pentagon is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

9. International Data Transfers

If you are located outside the United States, please be aware that information we collect may be transferred to and processed in the United States. By using Pentagon, you consent to such transfer and processing.

10. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to say no to the sale of personal information (we do not sell)
• Right to access your personal information
• Right to equal service and price

To exercise these rights, contact us at privacy@pentagon.run.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Arlington Labs, Inc.
Email: privacy@pentagon.run