Privacy Policy

I. INFORMATION WE COLLECT

We collect “Non-Personal Information” and “Personal Information.” Non-Personal Information includes information that cannot be used to personally identify you, such as anonymous Site usage data, general demographic information we may collect, referring/exit pages and URLs, platform types, preferences you submit and preferences that are generated based on the data you submit and number of clicks. Personal Information includes your email address, name, company name, billing details, IP address, and any other information you provide during the registration process or while using our services. Additionally, if you contact us for support, we may collect information related to your inquiry.

1. Information collected via Technology

When you create an account through the Site, you provide your email address and may provide further Personal Information, including your name, company name, billing details, and payment information. The Site also receives information from your browser when you visit or use it, such as the website you came from (known as the “referring URL”), the type of browser you use, the device from which you connected to the Site, the time and date of access, and other information that does not personally identify you. We track this Site information using cookies, or small text files which include an anonymous unique identifier. Cookies are sent to a user's browser from our servers and are stored on the user's computer hard drive. Sending a cookie to a user's browser enables us to collect Non-Personal Information about that user and keep a record of the user's preferences when using the Site, both on an individual and aggregate basis. For example, the Company may use cookies to collect the following information:

• User authentication status to keep you logged in
• Site usage patterns and interaction data
• Preferred settings and customization options
• Referring/exit pages and URLs
• Device information, including browser type and operating system
• Frequency and duration of visits

RightNow Agent

RightNow runs on your machine. Its configuration, session transcripts, receipts, memory files, and local diagnostic log are stored under your RightNow home directory, which is ~/.rightnow by default. The shipped configuration disables telemetry, so RightNow does not send usage analytics to the Company.

To generate model output, RightNow sends your prompt, relevant contents of files the agent reads, and relevant tool results to the model provider selected in your configuration. The shipped configuration selects RunInfra at api.runinfra.ai, which is the Company's hosted model API. If you select Cerebras, Groq, OpenRouter, or Vercel AI Gateway with your own API key, that provider receives this data under its own terms. When the model uses web tools, web searches are sent through DuckDuckGo and web fetches contact the requested public sites.

When you sign in from RightNow, it opens the Site's sign-in flow in your browser. After you approve access, the Site issues a RunInfra API key tied to your account and returns your account plan and remaining allowance to RightNow. The CLI stores its credentials on your machine.

The Company may use both persistent and session cookies; persistent cookies remain on your computer after you close your session and until you delete them, while session cookies expire when you close your browser. For example, we store a persistent cookie to track user preferences, authentication status, and site usage patterns to enhance user experience and provide personalized recommendations.

2. Information you provide us by registering for an account

In addition to the information provided automatically by your browser when you visit the Site, you may create a personal profile for account-based features. You can create a profile by registering with the Service and entering your email address, and creating a user name and a password. By registering, you are authorizing us to collect, store and use your email address in accordance with this Privacy Policy.

3. Children's Privacy

The Site and the Service are not directed to anyone under the age of 13. The Site does not knowingly collect or solicit information from anyone under the age of 13, or allow anyone under the age of 13 to sign up for the Service. In the event that we learn that we have gathered personal information from anyone under the age of 13 without the consent of a parent or guardian, we will delete that information as soon as possible. If you believe we have collected such information, please contact us at jaber@rightnowai.co.

II. HOW WE USE AND SHARE INFORMATION

GDPR Lawful Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: To provide RightNow Agent, Forge, and related account services
• Legitimate Interests: To improve our product, ensure security, prevent fraud
• Consent: For marketing communications and optional features (you can withdraw anytime)
• Legal Obligation: To comply with tax laws, respond to legal requests

RightNow Agent

The Company uses account information from the RightNow sign-in flow to authenticate you, issue and manage the RunInfra API key tied to your account, and report your plan and remaining allowance. RightNow keeps its configuration, session transcripts, receipts, memory files, and diagnostic log on your machine. It does not send those local files or usage analytics to the Company merely because they are stored there.

Model requests are sent to the provider you select. RunInfra is the Company's own hosted model API. Cerebras, Groq, OpenRouter, and Vercel AI Gateway are optional providers that you select and configure with your own API key. Those providers receive the prompts, relevant file contents, and tool results needed for their model requests and handle that data under their own terms. Web searches and fetches also share the query or request with DuckDuckGo or the public site contacted when those tools are used.

Personal Information:

Except as otherwise stated in this Privacy Policy, we do not sell, trade, rent or otherwise share for marketing purposes your Personal Information with third parties without your consent. We do share Personal Information with vendors who perform services for the Company, such as the provider that sends our transactional emails. A model provider that you select for RightNow receives model-request data under that provider's own terms, as described above.

In general, the Personal Information you provide to us is used to help us communicate with you. For example, we use Personal Information to contact users in response to questions, solicit feedback from users, provide technical support, and inform users about promotional offers.

We may share Personal Information with outside parties if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to meet any applicable legal process or enforceable governmental request; to enforce applicable Terms of Service, including investigation of potential violations; address fraud, security or technical concerns; or to protect against harm to the rights, property, or safety of our users or the public as required or permitted by law.

Non-Personal Information

In general, we use Non-Personal Information to help us improve the Service and customize the user experience. We also aggregate Non-Personal Information in order to track trends and analyze use patterns on the Site. This Privacy Policy does not limit in any way our use or disclosure of Non-Personal Information and we reserve the right to use and disclose such Non-Personal Information to our partners, advertisers and other third parties at our discretion.

In the event we undergo a business transaction such as a merger, acquisition by another company, or sale of all or a portion of our assets, your Personal Information may be among the assets transferred. You acknowledge and consent that such transfers may occur and are permitted by this Privacy Policy, and that any acquirer of our assets may continue to process your Personal Information as set forth in this Privacy Policy. If our information practices change at any time in the future, we will post the policy changes to the Site so that you may opt out of the new information practices. We suggest that you check the Site periodically if you are concerned about how your information is used.

III. HOW WE PROTECT INFORMATION

We implement security measures designed to protect your information from unauthorized access. Your account is protected by your account password and we urge you to take steps to keep your personal information safe by not disclosing your password and by logging out of your account after each use. We further protect your information from potential security breaches by implementing certain technological security measures including encryption, firewalls and secure socket layer technology. However, these measures do not guarantee that your information will not be accessed, disclosed, altered or destroyed by breach of such firewalls and secure server software. By using our Service, you acknowledge that you understand and agree to assume these risks.

IV. YOUR RIGHTS REGARDING THE USE OF YOUR PERSONAL INFORMATION

You have the right at any time to prevent us from contacting you for marketing purposes. When we send a promotional communication to a user, the user can opt out of further promotional communications by following the unsubscribe instructions provided in each promotional e-mail. You can also indicate that you do not wish to receive marketing communications by emailing us at jaber@rightnowai.co. Please note that notwithstanding the promotional preferences you indicate by unsubscribing via email, we may continue to send you administrative emails, including, for example, periodic updates to our Privacy Policy or notifications about your account or service usage.

V. LINKS TO OTHER WEBSITES

As part of the Service, we may provide links to or compatibility with other websites or applications. However, we are not responsible for the privacy practices employed by those websites or the information or content they contain. This Privacy Policy applies solely to information collected by us through the Site and the Service. Therefore, this Privacy Policy does not apply to your use of a third party website accessed by selecting a link on our Site or via our Service. To the extent that you access or use the Service through or on another website or application, then the privacy policy of that other website or application will apply to your access or use of that site or application. We encourage our users to read the privacy statements of other websites before proceeding to use them.

VI. CHANGES TO OUR PRIVACY POLICY

The Company reserves the right to change this policy and our Terms of Service at any time. We will notify you of significant changes to our Privacy Policy by sending a notice to the primary email address specified in your account or by placing a prominent notice on our site. Significant changes will go into effect 30 days following such notification. Non-material changes or clarifications will take effect immediately. You should periodically check the Site and this privacy page for updates.

VII. CONTACT US

If you have any questions regarding this Privacy Policy or the practices of this Site, please contact us by sending an email to jaber@rightnowai.co.

VIII. DATA SUBJECT RIGHTS (GDPR)

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format (JSON)
• Restrict processing of your data
• Object to processing of your data
• Withdraw consent for marketing

To exercise these rights, email jaber@rightnowai.co with your request. We will respond within 30 days.

Data Deletion

To delete your account and associated data held by the Company, email jaber@rightnowai.co with subject line “Account Deletion Request”. We will:

1. Confirm your identity
2. Permanently delete your account, personal information, and source code and technical data held by the Company within 30 days
3. Send confirmation once deletion is complete

Exceptions: Billing records are retained for 7 years for tax compliance. Anonymized usage data may be retained for analytics.

Account deletion does not remove RightNow configuration, session transcripts, receipts, memory files, or diagnostic logs stored locally on your machine. You control and may delete those local files.

IX. THIRD-PARTY SERVICE PROVIDERS (SUBPROCESSORS)

We use the following services and providers to operate our platform and support user-selected model connections:

RunInfra is the Company's own hosted model API. If you select Cerebras, Groq, OpenRouter, or Vercel AI Gateway in RightNow, you choose that provider and its terms govern its handling of model-request data. The other listed providers handle data for the purposes shown in the table.

For questions about our subprocessors, contact jaber@rightnowai.co.

X. DATA RETENTION

We retain your data as follows:

Active Accounts

• Account data: Retained while account is active
• Company-held source code and technical data: Retained while account is active
• Site and Forge usage analytics: 2 years
• Hosted service error logs: 90 days

RightNow configuration, session transcripts, receipts, memory files, and its diagnostic log remain on your machine unless you remove them.

Deleted Accounts

• Company-held personal data and source code: Permanently deleted within 30 days
• Anonymized analytics: May be retained indefinitely
• Billing records: 7 years (tax/legal compliance)

Backups

• Automated backups retained for 90 days
• Data in backups permanently deleted after retention period

To request early deletion of specific data, email jaber@rightnowai.co.

XI. INTERNATIONAL DATA TRANSFERS

Our hosted services are operated from the United States. Company-hosted data is stored in US-based data centers:

• Primary database: AWS us-west-1 (Oregon)
• API infrastructure: Chicago, Illinois
• Vector database: GCP us-central1 (Iowa)

If you access the Company's hosted services from outside the United States, data you provide to those hosted services will be transferred to and processed in the US. We implement appropriate safeguards including:

• Standard Contractual Clauses (SCCs) with all vendors
• Encryption in transit and at rest
• SOC 2 certified infrastructure

For EU users: By using the Company's hosted services, you consent to this transfer. You have rights under GDPR including the right to lodge complaints with your local data protection authority.

RightNow data stored locally stays on your machine unless a feature sends it elsewhere as described in this Privacy Policy. Data sent to a model provider you select may be processed in locations described in that provider's terms.

Last Updated: This Privacy Policy was last updated on Friday, September 4, 2026.