1. Controller

Singuse is operated by Singuse LLC ("Singuse", "we", "us"). For users located in Peru, the service is provided by Siulrac S.A.C., which acts as the responsible entity under Peruvian law. References to Singuse include both entities as applicable.

Privacy requests: [email protected].

2. What we collect

Account: name, email, password hash, avatar, assistant name/avatar, locale, plan, workspace memberships and roles; social sign-in identifiers (Google, GitHub, X) if you use them.
Conversations: your messages, attachments, the AI responses, tool calls and their results, artifacts (documents, spreadsheets, code, images, video), sources read, memories you ask Singuse to keep, goals, and approvals you grant or deny.
Files you upload or Singuse creates, including extracted text and embeddings used to search them.
Browser and computer activity: URLs visited, page titles, screenshots and screencast frames shown to you, downloads, form actions, session logs; if the persistent profile is on, cookies and site logins stored encrypted per workspace; credentials you save in the Secure Store (encrypted, never shown to AI models).
Connected apps and MCP: OAuth tokens (encrypted) and the data your requests read or write in those apps; MCP server URLs and tool metadata.
Agents, tasks and schedules: configuration, run history, outputs and credit budgets.
Usage and billing: credit transactions, model/tool usage, plan and payment status, invoices. Payment details are handled by PayPal, NOWPayments or Cryptomus · we receive transaction identifiers, not card numbers.
Technical and security data: IP address, device/browser, timestamps, error logs, rate-limit and audit events (who did what, when, with which tool and result).
Cookies and local storage: see the Cookie Policy.

3. Why we use it

Provide the Service: run your requests, keep your workspace, resume background and scheduled work, show you progress in real time.
Safety and security: detect abuse, enforce permissions and approval policies, isolate tenants, keep audit trails for Business workspaces.
Billing: meter credits, process subscriptions and packs, prevent fraud.
Communication: service emails (verification, approvals needed, task finished, credit alerts, invitations). Marketing emails only with consent; unsubscribe anytime.
Improve Singuse: aggregated, de-identified statistics and · only with your consent · analytics cookies.

Legal bases (GDPR/UK GDPR): contract (Art. 6(1)(b)), legitimate interests in security and product improvement (6(1)(f)), consent for analytics and marketing (6(1)(a)), legal obligations (6(1)(c)). For Peru, processing follows Ley 29733 and its regulation; consent is obtained where required.

4. AI models and training

To answer you, Singuse sends the relevant parts of your conversation, files and tool results to third-party model providers (OpenAI, Anthropic, Google, OpenRouter, fal.ai, BytePlus) under their API/enterprise terms, which prohibit using API data to train their models. Singuse does not train models on your content. We use what you send only to produce your results and to keep the memories you explicitly ask for.

5. Who we share data with

Processors: hosting and infrastructure (our servers in the EU/US), AI model providers above, email delivery, payment processors, error monitoring and · with consent · Google Analytics.
Apps you connect and MCP servers you add: they receive exactly what your requests send them; they are independent controllers.
Websites Singuse visits for you: they see our browser like any visitor, plus whatever you ask Singuse to enter.
Your workspace: members, admins and owners see shared content, usage and audit logs according to their role.
Legal: authorities when required by law, or to protect rights, safety and the integrity of the Service. In a merger or acquisition, data may transfer under the same protections.

We do not sell personal data and we do not share it for cross-context behavioural advertising.

6. International transfers

Data may be processed in the United States, the European Union and other countries where our providers operate. Transfers from the EEA/UK rely on adequacy decisions or Standard Contractual Clauses; transfers from Peru follow Ley 29733 (cross-border flow with adequate protection or consent).

7. Retention

Conversations, files and artifacts: until you delete them or your account. Guest data: up to 30 days after the last activity. Browser profile data: until you clear it (Settings → Browser) or 90 days of inactivity. Screenshots and screencast frames: short-lived (typically ≤ 7 days). Audit logs and credit transactions: 24 months, or longer where tax/accounting law requires. Backups expire within 35 days.

8. Security

TLS in transit, encryption at rest for secrets (OAuth tokens, browser cookies, vault credentials · AES-256-GCM with per-record keys), isolated browser/computer sandboxes per user, server-side authorisation on every resource, rate limiting, approval gates for sensitive actions, and complete audit trails. No system is perfectly secure; tell us about vulnerabilities at [email protected].

9. Your rights

Depending on where you live (GDPR, UK GDPR, CCPA/CPRA, Ley 29733 in Peru and others) you can access, correct, export, delete or restrict your data, object to certain processing, withdraw consent, and complain to a supervisory authority (for Peru: the Autoridad Nacional de Protección de Datos Personales). Most of this is self-service: Settings → Profile (export, delete), Settings → Memory, Settings → Browser (clear data), Settings → Apps (disconnect). Otherwise email [email protected]; we answer within 30 days (10 business days for ARCO requests in Peru). We do not discriminate for exercising your rights.

10. Children

Singuse is not directed to anyone under 18. If you believe a minor has provided data, contact us and we will delete it.

11. Changes

We will post updates here and, for material changes, notify you in the app or by email before they take effect.