← Back Legal

Privacy Policy.

Last updated: June 2026

This Privacy Policy describes how Gavrun, Inc. ("Gavrun", "we", "us") collects, uses, and protects information when you use the Gavrun platform, including the Langman SDK and Zumie Gateway.

Information we collect

Account information — name, email address, and authentication credentials when you sign up.
Decision records — tool call payloads, policy verdicts, and audit log entries generated by your agents.
Usage data — token counts, request volumes, and timing metadata for billing and monitoring purposes.
Configuration data — policies, agent registrations, and workspace settings you create in the console.

How we use your information

To operate and deliver the Gavrun service — decisions, approvals, and audit trails.
To authenticate users and enforce workspace access controls.
To calculate and report token usage and cost.
To investigate security incidents and policy violations.
To improve the platform — aggregate, anonymised usage patterns only.

Data sharing

We do not sell your data. We do not share decision payloads or agent configurations with third parties except as required to operate the service (e.g. cloud infrastructure providers under data processing agreements) or as required by law.

Zumie Gateway (self-hosted)

When you deploy Zumie Gateway on your own AWS infrastructure, decision data never leaves your environment. Gavrun, Inc. has no access to decision payloads processed through a self-hosted Gateway deployment.

Data retention

Decision records and audit logs are retained for 90 days by default in the hosted service. You may request earlier deletion by contacting [email protected].

Your rights

You may request access to, correction of, or deletion of your personal data at any time. Contact us at [email protected]. We will respond within 30 days.

Cookies

The Gavrun console uses session cookies for authentication only. We do not use tracking or advertising cookies.

Changes to this policy

We will notify workspace admins by email of any material changes to this policy at least 14 days before they take effect.

Contact

Questions about this policy: [email protected]