Privacy Policy

Last updated: March 2026

LeapNet LLC ("we", "us", "our"), operating as Authorail, provides machine spending authority for AI agents. This Privacy Policy explains how we collect, use, and protect your information when you use authorail.com and the Authorail service.

1. Information We Collect

Account Information. When you create an account, we collect your name, email address, organization name, and authentication credentials.

Usage Data. We collect data about how your agents interact with the Authorail service, including policy evaluations, approval workflows, and API call metadata.

Payment Information. Payment processing is handled by Stripe. We do not store your full credit card number. We receive and store billing details such as your billing address and the last four digits of your card.

Audit Logs. Authorail generates audit trails of all policy evaluations, agent spending decisions, and administrative actions. These logs are part of the core service functionality.

2. How We Use Your Information

  • Provide, operate, and maintain the Authorail service
  • Process transactions and send billing-related communications
  • Improve and develop new features based on aggregate usage patterns
  • Ensure compliance with spending policies and generate audit reports
  • Respond to support requests and communicate service updates
  • Detect and prevent fraud, abuse, or security incidents

3. Data Retention

Audit log retention varies by pricing tier:

  • Sandbox (Free): 7 days
  • Pro: 1 year
  • Enterprise: Unlimited (configurable)

Account information is retained for as long as your account is active. After account deletion, we remove personal data within 30 days, except where required by law.

4. Third Parties

We share data only with the following categories of service providers:

  • Stripe — payment processing. Subject to Stripe's Privacy Policy.
  • Cloud infrastructure providers — hosting and data storage, under strict data processing agreements.
  • Analytics — minimal, privacy-respecting analytics to understand site usage.

We do not sell your personal data to third parties.

5. Your Rights

You have the right to:

  • Access your personal data and audit logs
  • Export your data in a machine-readable format via the API
  • Delete your account and associated personal data
  • Correct inaccurate information in your account

To exercise any of these rights, contact us at [email protected].

6. Cookies

We use minimal cookies. Essential cookies are required for authentication and session management. We may use a single analytics cookie to understand aggregate site usage. We do not use advertising or tracking cookies.

7. Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, and role-based access controls. All policy evaluations pass through a non-bypassable enforcement layer by design.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our website. Continued use of the service after changes constitutes acceptance.

9. Contact Us

If you have questions about this Privacy Policy, contact us at [email protected].