Privacy policy

Who we are

Authoric is a hosted platform for building applications whose actions, by people and by AI, run through the same roles, policies, approvals and audit. It is operated by Media Foundations LLC ("we", "us"). This policy explains what personal information we handle, why, and the choices you have.

What we collect

Account details: your name, email address, a securely hashed password, and, if you turn on two-factor authentication, your second factor (and your phone number, for codes by text message).

Access requests: while Authoric is invite-only, the name, email address, company and note you send us when you ask for access.

Sign-in and security records: when you sign in we record the time, your IP address and your browser, so you can see where you are signed in and end a session, and so we can protect your account.

What you build: the organizations, apps, data, files and settings you create. We store and process this content on your behalf, to run the service for you.

Activity records: an audit trail of actions taken in your organization, by people, API keys and AI agents, which is part of what the product does.

Billing: if you buy a paid plan, our payment processor collects your card details. We never see or store your full card number.

How we use it

To provide and secure the service: creating and signing in to your account, running your apps, enforcing your policies, and keeping the records the product shows you.

To contact you about your account: sign-in links and codes, password resets, invitations, access decisions, receipts, and important notices about the service. We do not send marketing email.

To keep Authoric working: diagnosing problems, preventing abuse, and meeting legal obligations.

We do not sell your personal information, and we do not use it for advertising.

Cookies and tracking

Authoric does not use advertising or analytics trackers, and it does not set cookies. To keep you signed in, the console stores your session in your browser's local storage; signing out removes it.

Who we share it with

Service providers that run parts of Authoric for us, only to do that work: Amazon Web Services (hosting, storage and email delivery), Stripe (payments), and Twilio (text-message codes, if you use them).

AI providers you choose: when you connect your own AI provider account, the prompts and data your agents send go to that provider under your agreement with them.

People in your organization: what you do in an organization is visible to its members according to the roles and policies its owners set.

When the law requires it, or to protect the rights, safety and security of our users and the service.

How long we keep it

We keep your account information for as long as your account is open. When an account or app is removed we delete its data, except where we must keep some records for legal, security or billing reasons, and except for backups, which expire on their own schedule.

Your choices

You can see and update your account details in the console, and see and end your signed-in sessions there. To ask for a copy of your personal information, a correction, or deletion of your account, email us and we will respond.

Security

We protect your information with access controls, encryption of stored credentials, and the controls described on our security page. No system is perfectly secure, and we will tell you if a problem affects your information.

Children

Authoric is a service for businesses and is not directed to children under 16.

Changes to this policy

If we change this policy we will update the date at the top of this page, and tell account owners by email about any significant change.

Contact us

Questions or requests about your information: info@mediafoundations.com.