Privacy Policy

Last updated November 2, 2026

Vadoo Internet Services Private Limited (“Vadoo,” “we,” “us,” or “our”) operates Suparagent. This policy describes the personal information handled when you visit our website or use a Suparagent hosted account. It does not replace the privacy terms of AI, sandbox, payment or connected-app providers you choose to use.

Information we handle

• Account and sign-in details: email address, account identifier, password hash, email-verification and password-reset records, and session metadata. Session records can include sign-in times, IP address and browser user agent.
• Workspace and activity: prompts, conversations, files, routines, notes, agent outputs and other content you put in your workspace, plus sandbox state and usage needed to operate your account. Workspace content is stored in the account’s hosted sandbox.
• Provider connections: credentials and information needed for providers or connected apps you choose. For the free preview, your Boat API key is encrypted before it is stored in our account control plane. Paid-plan compute uses a service-operated Boat account. AI-provider charges and account terms remain between you and that provider.
• Billing: plan, subscription status, billing-period usage and Stripe identifiers. Stripe collects and processes payment-card details on its payment pages; we do not receive your full card number.
• Support and security: messages you send to support, service and error logs, and technical details used to authenticate requests, prevent abuse and diagnose incidents.
• Website analytics: page views, page paths, referrer origin, browser and device details, and a pseudonymous cookie identifier collected by Google Analytics 4.

How we use information

We use this information to create and secure accounts; provide the hosted workspace; provision, wake, stop and meter sandbox compute; process subscriptions; send verification and account messages; understand website usage and improve our pages; respond to support requests; prevent fraud and misuse; maintain and improve service reliability; and meet legal obligations. We do not sell personal information or use private workspace content to train Vadoo’s own AI models.

Providers and sharing

We share information only as needed to provide the service, at your direction, or as allowed by law:

• Infrastructure and email: Amazon Web Services hosts service infrastructure, databases and account email delivery.
• Sandbox provider: Boat runs the hosted computer and stores its disk. The free preview uses the key you provide; paid plans use Vadoo’s operator account.
• Payments: Stripe processes paid subscriptions and payment-card details. We receive billing identifiers, payment status and transaction information needed to manage your plan.
• AI providers: when you submit a task, the selected AI provider receives the prompt and the context needed to answer it. Whether that provider retains prompts or uses them to improve models depends on its terms, privacy policy and your account settings.
• Connected apps: an app such as Google Workspace or GitHub receives the requests you authorize. Information returned by that app may be included in your workspace history or sent to your selected AI provider when needed for a task you request.
• Analytics: Google Analytics processes website usage information for us so we can understand visits and improve the site. Our tag removes query strings and fragments from page URLs and disables Google Signals and ad-personalization signals.
• Legal and safety: we may disclose information when required by law or when reasonably necessary to protect users, the service or other people.

We share only information needed to provide a feature you request. Providers may have separate data practices described in their own policies.

Google Workspace data and Limited Use

When you connect Google Workspace, the permissions shown by Google determine what the integration can access. We use that information only to provide the features you choose. We do not sell Google user data, use it for advertising, or use it to train Vadoo’s own AI models. We transfer it to your selected AI provider only when needed to carry out a task you ask it to perform. Human access is limited to support you request, security investigations or legal obligations.

The use of information received from Google Workspace scopes will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect an integration in Suparagent and revoke its access in your Google Account.

Retention and deletion

We keep account, session, sandbox and billing records while needed to operate your account, protect the service, resolve disputes and meet legal or financial requirements. You can request account deletion from account settings. Deletion cancels an active paid subscription, removes the account’s service records and stored preview provider key, and requests deletion of its hosted sandbox. Payment processors, infrastructure providers and backups may retain limited records under their own retention schedules or where the law requires. Workspace availability after a sandbox stops or is deleted is subject to the sandbox provider’s retention rules; export files you need before closing or canceling your account.

Cookies and local storage

Suparagent uses a necessary session cookie to keep you signed in. Google Analytics 4 uses a first-party _ga cookie to distinguish website visits and sessions, and may collect page paths, referrer origin, browser and device details, and approximate location for usage reports. Our tag omits query strings and fragments from page URLs. We do not send workspace content or account form values to Analytics, and we disable Google Signals and ad-personalization signals. You can block or clear cookies in your browser; analytics measurements may be incomplete when cookies are blocked. Read Google’s overview of Analytics data collection. The website stores your light or dark theme preference in local storage. Stripe may use its own cookies or similar technologies when you visit its hosted payment pages.

Security and where information is processed

We use HTTPS for browser and service connections. Account passwords are stored as Argon2id hashes, session tokens are stored as hashes, and free-preview Boat keys are encrypted before storage. No storage or transmission method is completely secure. Our providers may process information in the United States, India or other countries where they operate, subject to applicable law and their own safeguards.

Your choices and privacy rights

You can change your password, disconnect supported provider accounts and delete your account through the service. Depending on where you live, you may also have rights to access, correct, delete, restrict or receive a copy of personal information, or object to certain processing. Contact us at support@vadoo.tv to make a request or ask a question.

Children

Suparagent hosted accounts are for people aged 18 or older. We do not knowingly collect personal information from children under 18. Contact us if you believe a child has created an account.

Changes and contact

We may update this policy when our service or legal requirements change. We will post the new date here and provide notice of material changes through the service or by email where appropriate.

Vadoo Internet Services Private Limited
support@vadoo.tv

Terms of Service · Plans and pricing