Privacy Policy Addendum for Proprietary Service Agent

Last Updated: July 10, 2026

This Privacy Policy Addendum applies if you use the Company's Proprietary Service Agent made available through the Platform (the “Functions”).

This Privacy Policy Addendum is incorporated into Anvita Flow Privacy Policy (available at Anvita Flow Privacy Policy) (“Privacy Policy”). The Privacy Policy continues to apply, save to the extent supplemented or replaced by this Privacy Policy Addendum. In case of any conflict between the Privacy Policy and this Privacy Policy Addendum, this Privacy Policy Addendum shall apply in respect of our data processing relating to the Functions to the extent of the inconsistency.

Capitalized terms shall have the meanings given to them in the Privacy Policy or Proprietary Service Agent Addendum to the Terms of Service (available at Proprietary Service Agent Addendum), unless otherwise defined herein.

This Privacy Policy applies to personal data processed in connection with the Functions. We do not control the data processing practice of third parties such as providers of Third Party Dependencies.

1. Our Role

We generally act as a data controller in respect of personal data we process to provide, operate, secure, administer, bill for, support and improve the Functions, including account data, service logs, deployment and configuration data, technical and security monitoring data, billing records, analytics data (where enabled), and customer support records. 

When you use the Functions, you determine what information, content and personal data is submitted to the Functions, how such information is used, and the business or personal purposes for which it is processed. Personal data may be processed through the Functions, including personal data contained in Inputs, Outputs and other content submitted to or generated through the Functions.

In making the Functions available, Anvita Flow may receive, transmit, route, host, store and otherwise handle Inputs, Outputs and other content submitted to or generated through the Functions as necessary.

We do not use personal data contained in your Inputs or Outputs relating to the Functions to develop, train or improve our Service unless we are permitted to do so under Applicable Law.

2. Types of Personal Data Processed

Inputs, Outputs, and content

When you use the Functions, we may collect or process:

• Inputs submitted by you to the Functions, including prompts, instructions, requests, files, text, data, materials or other content; 
• Outputs generated, returned or made available by or through the Functions in response to Inputs or other user activity; and
• other User Data or content submitted, uploaded, transmitted, stored, configured or otherwise processed through the Functions. 

Transaction, billing and usage data

We may collect or process:

• records relating to your purchase or use of the Functions, including fees, credits, billing records, payment confirmations and transaction history; 
• payment card, bank account or digital payment information if you choose to provide it directly to us, or payment-related metadata where payment processing is handled by a third-party payment service provider; and 
• service usage logs, consumption and quota data, timestamps, session identifiers, feature usage information, deployment activity, configuration history, resource utilisation and support interactions.

Third-party and integration data

We may collect or process:

• information received from third-party payment service providers, identity verification providers, cloud infrastructure providers, analytics providers or customer support providers engaged by us in connection with the Functions; and 
• where enabled and directed by you, data exchanged with Non-Hosted Agents, other Service Agents, external integrations, third-party systems or external execution environments, or other services made available through or in connection with the Functions. 

Depending on the nature of the Inputs or User data submitted to the Functions, personal data that is more sensitive in nature, such as information relating to an individual’s health, finances, communications, employment, identifiers, account credentials or other personal affairs, may be processed in connection with the Functions. Users remain responsible for assessing the necessity and appropriateness of submitting any personal data, including personal data of a more sensitive nature, through the Functions.

3. Purposes of Use

We process personal data only for purposes that are lawful and directly related to the Functions, including:

• (a) making the Functions available and enabling your access to and use of the Functions;
• (b) receiving, transmitting, routing, hosting, storing and otherwise handling Inputs, Outputs and other content processed through the Functions;
• (c) facilitating onboarding, configuration, deployment, support, billing, payment processing, credit issuance and account administration;
• (d) maintaining, securing, monitoring and supporting the Functions and related infrastructure; and
• (e) where enabled by us and directed by you, facilitating integrations, interactions with Service Agents, Non-Hosted Agents, external systems, third-party service providers or other ancillary functionality.

4. Data Transfers

We may disclose your personal data to the following parties which may be located outside of your home jurisdiction:

• (a) service providers and vendors, such as Third Party Models or Hosting Service providers.