Privacy Policy

This Privacy Policy describes how Odyssey XXII LLC ("Company", "we", "us", "our"), a North Carolina limited liability company, collects, uses, and protects your information when you use the Carapace service.

When you use Carapace, we collect information necessary to provide and improve our service:

• Account information (email address, name) through Clerk authentication
• Channel connection data (bot tokens, channel IDs)
• Commands sent to your AI agent
• Audit logs of agent actions
• Usage statistics (commands executed, channels connected)
• Subscription and billing information through Stripe

We use the information we collect to:

• Provide and maintain the Carapace service
• Process your AI agent commands securely
• Generate audit logs and analytics
• Process payments and manage subscriptions
• Communicate with you about service updates
• Improve our security and safety features

Important: Your commands and data are processed by Claude (Anthropic) for AI capabilities and security analysis. By using Carapace, you acknowledge that:

• Your commands are sent to Anthropic's API for processing
• Command content is analyzed for security risk assessment
• Anthropic's privacy policy and data practices also apply
• We use sandboxed environments to protect your data during execution

Read Anthropic's privacy policy: anthropic.com/privacy

We take data security seriously:

• Data is encrypted in transit using TLS
• User credentials are managed by Clerk
• Payments are processed securely through Stripe
• Sandbox environments are isolated and ephemeral

However, no system is 100% secure. You use Carapace at your own risk.

We retain your data for as long as your account is active and as needed to provide the service.

• Account data is retained while your account is active
• Audit logs are retained for 90 days
• After account deletion, we may retain certain data for up to 30 days for operational purposes
• We may retain anonymized or aggregated data indefinitely for analytics

Carapace is operated from the United States. If you are accessing the service from outside the United States, your data will be transferred to, stored, and processed in the United States.

By using Carapace, you consent to the transfer of your information to the United States and acknowledge that data protection laws in the United States may differ from those in your country.

We may use cookies and similar technologies to:

• Keep you signed in to your account
• Remember your preferences
• Understand how you use our service

You can control cookies through your browser settings, but disabling them may affect functionality.

Carapace integrates with the following third-party services:

• Clerk - Authentication and user management
• Stripe - Payment processing
• Anthropic - AI model and processing
• Vercel - Hosting and infrastructure

Each service has its own privacy policy and data practices. We recommend reviewing them.

You may request to:

• Access the personal data we hold about you
• Correct inaccurate data in your account
• Delete your account and associated data
• Opt out of marketing communications

To exercise these rights, contact us at ydarar@odysseyxxii.com

We will respond to requests within 30 days. Some requests may require account verification.

We may update this Privacy Policy as Carapace evolves. We will post the updated policy on this page with a revised "Last updated" date. For material changes, we will make reasonable efforts to notify you through the service or via the email associated with your account.

Your continued use of Carapace after changes are posted constitutes acceptance of the updated policy.

Questions about this privacy policy or our data practices? Contact us:

ydarar@odysseyxxii.com