Your data and your choices.

Google Analytics 4

Optional measurement on the website and app.

What is collected and why: only after you accept, Google receives page views, browser/device information and usage events to help us understand service use. Analytics uses pseudonymous browser identifiers; it is not anonymous data. We do not deliberately send your email, API keys, policy names, source or evaluation inputs in our custom events.

Cookies and choices: neither the Google tag nor Antaeus campaign storage is enabled before acceptance. Accept analytics and Reject analytics are available together. Reopen Analytics preferences in the footer to change your choice. Website and app preferences are separate. We store your choice locally for up to 180 days without a visitor identifier. GA cookies, when allowed, are configured for up to 180 days; campaign attribution uses session storage.

Legal basis: consent for optional analytics and related storage. Signing in, using the API or accepting service terms does not grant analytics consent.

Retention: withdrawing stops subsequent collection and clears accessible GA cookies and campaign storage. It does not erase records already sent to Google. Google's service configuration and applicable terms govern retained measurement records; contact us about access or erasure requests.

International transfer: Google may process measurement data in the United States and elsewhere under its applicable terms. We do not use analytics for advertising or enable Google Signals in our tag configuration.

Buttondown

Subscriptions and delivery.

Who is responsible: the operators control the release list; Buttondown processes subscriber information on their behalf.

What is collected and why: your email, subscription status and signup/delivery metadata, such as time and network address, to send Antaeus release updates. Open tracking, click tracking and archive analytics are off.

Legal basis: consent. Confirm using the emailed link; you can withdraw at any time through the unsubscribe link. Withdrawal does not affect processing already undertaken lawfully.

Retention: your address remains while subscribed. Unsubscribing stops future updates; limited suppression or unconfirmed-subscription records may remain to avoid unwanted delivery. Ask us to delete them where applicable.

International transfer: Buttondown is US-based; its data processing agreement describes processing and transfer safeguards.

Account access

Clerk and chosen sign-in providers.

Clerk receives email/account details, authentication events and network/device security information, and sets essential session cookies to keep you signed in. We retain internal account/workspace identifiers, key metadata, authorization and usage records. Full API-key secrets are not stored in our application database.

If you choose Google sign-in, we request openid, email and profile for your name, email and profile picture. We do not request Gmail, Drive or contact access. Antaeus’s use and transfer of Google API information follows the Google API Services User Data Policy, including Limited Use. We do not use Google sign-in data for advertising or model training.

Customer content

Saved policies and evaluated inputs.

Saved policy drafts, published versions and saved examples are stored in Cloudflare D1. Raw evaluation inputs and inline policy source are processed to evaluate your request and are not deliberately retained in ordinary Antaeus operation history. Separately saved examples remain stored. We retain structured Decisions, request metadata, fingerprints, usage and provider-token records; a Decision may itself contain input-derived information.

The engine runs on Cloudflare and sends policy questions and input state to Drex, operated by Nace AI, Inc., for semantic evaluation in the United States. Its privacy notice distinguishes input/output retention from API logs and usage metadata, which may remain for up to 13 months; saved content and deidentified training data have separate retention periods. Antaeus does not train models on your content. The provider’s current service terms and privacy notice allow model training and improvement unless the account opts out. The published opt-out applies to subsequently submitted content; it does not remove information already used in training. We have not yet verified that opt-out for every account used by this service; do not assume provider processing is retention-free or use this beta for sensitive personal data.

Retention: ordinary operation history and provider counters are scheduled for deletion after 90 days; idempotent replay lookup lasts 24 hours. Saved policies/examples and account records remain while needed to provide your account, until removal or account closure processing. Minimal financial records have a separate schedule below.

Prepaid payments

Dodo checkout and our credit records.

Dodo Payments is the merchant of record and independently processes buyer/payment information for payment, tax, fraud, compliance and disputes. Payment details are entered into its checkout; Antaeus does not receive full card numbers. Its own terms apply to that processing.

We retain purchase/session/payment identifiers, principal and tax amounts, credit/debit records, terms acceptance and sanitized payment evidence to fulfill purchases, account for usage, reconcile refunds and prevent duplicate financial effects. These are separate from evaluation content.

Retention: necessary accounting records remain for applicable statutory periods; refund/dispute and limited anti-duplicate identity records remain while needed for those purposes or a documented legal hold. Closing your account does not automatically erase legally required transaction records. You may ask us about the records and retention criteria applicable to your transaction.

Purposes and choices

Rights, closure and international processing.

Legal basis: we use account information to provide requested services where necessary for a contract, appropriate legitimate interests for security, administration and support, and legal obligations for required accounting. Optional analytics and newsletter processing use consent. Customers determine the lawful basis for personal data they submit in evaluations; a business contract does not make every piece of submitted personal data necessary.

Your rights: depending on applicable law, you may request access, correction, erasure, portability or a copy, restriction or objection, and withdraw consent. Contact privacy@antaeus.io. We may verify identity proportionately and explain lawful retention exceptions. We respond within applicable deadlines. You can complain to your competent data protection authority, including Israel’s Privacy Protection Authority where applicable.

For customer-controlled content, contact that customer; we assist its authorized requests. For account closure, contact us so we can stop access, handle unused credit, and arrange deletion and any necessary retained records. Requests are handled individually by the operators; the beta does not offer self-service account deletion or optional raw-content logging.

Recovery copies: infrastructure backups and provider copies may remain until their applicable expiry. D1 recovery is plan-dependent, up to 30 days on paid plans. This is not a promise that all supplier copies disappear within 30 days.

International transfer: the operators are in Israel, and Cloudflare, Clerk, Nace, Google, Buttondown and Dodo may process data in the United States or other locations. Applicable supplier agreements and lawful transfer safeguards are required for the actual data path. No dedicated region or blanket transfer certification is promised; ask us about safeguards for your intended use.

The service is intended for adults developing or operating applications, not children. Do not use an experimental Decision as the sole basis for a decision with legal or similarly significant effects on a person.