Privacy Policy Addendum for Agent Generation Service

Last Updated: July 10, 2026

This Privacy Policy Addendum for Agent Generation Service (“Privacy Policy Addendum”) applies if you use Anvita Flow Agent Generation Service (“Functions”).

This Privacy Policy Addendum is incorporated into Anvita Flow Privacy Policy (available at Anvita Flow Privacy Policy) (“Privacy Policy”). The Privacy Policy continues to apply, save to the extent supplemented or replaced by this Privacy Policy Addendum. In case of any conflict between the Privacy Policy and this Privacy Policy Addendum, this Privacy Policy Addendum shall apply in respect of our data processing relating to the Functions to the extent of the inconsistency.

Capitalized terms shall have the meanings given to them in the Privacy Policy or Agent Generation Service Addendum (available at Agent Generation Service Addendum), unless otherwise defined here.

This Privacy Policy applies to personal data processed in connection with the Functions provided by us to you set out in the applicable Terms of Service. We do not control data processing practice of third parties such as providers of Third Party Dependencies.

1. Our Role

We generally act as a data controller in respect of personal data we process to provide, operate, secure, administer, bill for, support and improve the Functions, including service logs, deployment and configuration data, listing, marketplace and discovery data, technical and security monitoring data, billing records, analytics data (where enabled), and customer support records. 

We generally act as a data processor in respect of your Inputs and other personal data that you submit to the Functions or process through the Generated Agents (including through any Proprietary Managed Software, Third Party Models, or Hosting Services used to provide the Functions), where you (including any user, developer or other provider, such as a corporation or regulated or licensed institution) determine what data is submitted, how the data is used, and for what business or personal purpose it is processed.

2. Types of Personal Data Processed

Inputs, Outputs, and content

When you use the Functions, we may collect or process:

• Inputs submitted by you to the Functions, including prompts, instructions, requests, files, text, data, materials or other content; 
• Outputs generated, returned or made available by or through the Functions in response to Inputs or other user activity; and
• other User data or content submitted, uploaded, transmitted, stored, configured or otherwise processed through the Functions, including content used to generate, configure or operate the Generated Agents and information included in the listing of the Generated Agents. 

Transaction, billing and usage data

We may collect or process:

• records relating to your purchase or use of the Functions, including fees, credits, billing records, payment confirmations and transaction history; 
• payment card, bank account or digital payment information if you choose to provide it directly to us, or payment-related metadata where payment processing is handled by a third-party payment service provider; and 
• service usage logs, consumption and quota data, timestamps, session identifiers, feature usage information, deployment activity, configuration history, listing activity, resource utilisation and support interactions.

Third-party and integration data

We may collect or process:

• information received from third-party payment service providers, identity verification providers, cloud infrastructure providers, analytics providers or customer support providers engaged by us in connection with the Functions; and 
• where enabled and directed by you, data exchanged with Non-Hosted Agents, other Service Agents, external integrations, third-party systems or external execution environments, or other services made available through or in connection with the Functions. 

Depending on the nature of the Inputs or User data submitted to the Functions, we may process personal data that is more sensitive in nature, such as information relating to an individual’s health, finances, communications, employment, identifiers, account credentials or other personal affairs.

3. Purposes of Use

We process personal data only for purposes that are lawful and directly related to the Functions, including:

• (a) processing Inputs and generating, returning, storing, transmitting or otherwise making available Outputs and other functionality requested by you;
• (b) facilitating onboarding, Generated Agent configuration, deployment, listing, publication, distribution, display or promotion, support, billing, payment processing, pricing and monetization, credit issuance and account administration;
• (c) enabling discovery, display, selection, access to and use of the Generated Agents by other Users through the Platform;
• (d) where enabled by us and directed by you, facilitating integrations, interactions with the Generated Agents, Non-Hosted Agents, external systems, third-party service providers or other ancillary functionality.

4. Data Transfers

We may disclose your personal data to the following parties which may be located outside of your home jurisdiction:

• (a) service providers and vendors, such as Third Party Models or Hosting Service providers.