Privacy Policy

Introduction

Welcome to the AI Agent Marketplace, operated by Irizpro. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our marketplace platform for purchasing credits and executing AI-powered workflow agents.

If you connect a Google account, data we receive from Google APIs is handled only as described in the Google User Data section, which takes precedence over the rest of this policy for that data.

Information We Collect

How We Use Your Information

• To create and manage your marketplace account
• To process credit purchases and workflow executions
• To provide customer support and respond to inquiries
• To send transaction confirmations and account notifications
• To improve our platform and develop new features
• To detect and prevent fraud or unauthorized activities
• To comply with legal obligations and regulations

These uses do not apply to data received from Google APIs. Google user data is used only as described in the Google User Data section.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Payment Processing: With Razorpay for processing payments securely
• Workflow Execution: With n8n platform for executing AI agent workflows
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with any merger, sale, or transfer of company assets

The sharing described above does not apply to Google user data, which is never shared or transferred except as permitted in the Google User Data section.

LinkedIn Data & Community Management API

When you connect your LinkedIn account, our LinkedIn publishing features use the official LinkedIn Marketing (Community Management) APIs under LinkedIn's OAuth 2.0 authorization, and only with the permissions you explicitly grant on LinkedIn's consent screen. Our use, storage, and disclosure of LinkedIn data complies with the LinkedIn Marketing API Terms.

What we access and why:

• Your basic profile (name, headline, profile URL, member id) — to identify your account and post on your behalf.
• Organizations you administer — so you can choose which Company Page to post as.
• Publishing — to create posts on your personal profile or a Company Page you administer, at your instruction.
• Engagement & analytics — comments, reactions, and page statistics on your posts, shown back to you in the app. This may include limited public profile fields (name, headline) of members who comment on your posts, displayed only to you as the post owner.

How we store and protect it:

• Access and refresh tokens are encrypted at rest (AES-256-GCM) and stored per-tenant; they are never exposed to your browser or shared with other tenants.
• LinkedIn data is isolated per tenant — one customer can never access another customer's LinkedIn data.
• We do not sell LinkedIn data, use it for advertising, or share it with third parties, and we use it only to provide the features you requested.
• We retain LinkedIn data only as long as needed to provide the service. When you disconnect LinkedIn (Settings → Disconnect) or delete your account, we delete the stored tokens and associated LinkedIn data.
• Member (commenter) personal data retrieved via the APIs is displayed transiently for engagement management and is not repurposed or retained beyond what LinkedIn permits.

Google User Data

Some features of the Irizpro platform (ai.irizpro.com) let you connect your Google account using Google's OAuth 2.0 sign-in. This section is the only part of this Privacy Policy that governs data we receive from Google APIs (“Google user data”). Where any other section of this policy conflicts with this section, this section applies to Google user data.General statements elsewhere in this policy about how we use, share, retain or transfer “your information” do not apply to Google user data.

Which features use Google, and what they access:

We only request the permissions a feature needs, only when you choose to connect that feature, and Google shows you exactly what you are granting on its consent screen. Each type of Google user data is used only for the user-facing feature listed next to it:

• Basic account information (your Google email address, via the openid and email scopes) — used only to show you which Google account is connected.
• Google Calendar (calendar.events, calendar.freebusy) — used only by the meeting-booking feature of our WhatsApp automation. We read your calendar's free/busy times (not the contents of your events) to offer open time slots to your customers, and we create a calendar event (with a Google Meet link, if enabled) when a customer books one of those slots. We do not read, modify or delete any other events.
• Google Search Console (webmasters.readonly, read-only) — used only by our SEO analytics dashboard, to show you the search performance (clicks, impressions, click-through rate, average position, queries, pages, countries, devices, search appearance), page indexing status and submitted sitemaps of the website property you select. We never change anything in your Search Console account.

If we add a new feature that uses Google user data, we will list it here before it requests access, and it will follow the same rules.

Limited Use — what we will and will not do with Google user data:

• We use Google user data only to provide or improve the user-facing features described above, which are visible and prominent in our app's interface. We do not use it for any other purpose.
• We do not transfer Google user data to anyone, except (a) as necessary to provide or improve those user-facing features, (b) to comply with applicable law, (c) for security purposes such as investigating abuse, or (d) as part of a merger, acquisition or sale of assets, and only after obtaining your explicit prior consent.
• We do not use or transfer Google user data for serving advertisements, including personalized or retargeted ads.
• We do not sell Google user data, and we do not transfer it to data brokers or information resellers.
• We do not use Google user data to determine creditworthiness or for lending purposes.
• We do not use Google user data to develop, improve or train generalized artificial intelligence or machine-learning models.
• Google user data is never sent to any artificial-intelligence service, whether our own or a third party's. Irizpro's AI features (such as AI chat replies, AI steps in chatbot flows and AI content generation) are technically isolated from Google user data: messages and values that come from Google Calendar or Search Console are excluded from everything those features receive.
• No person at Irizpro reads Google user data unless (a) you give us explicit permission for specific data (for example, when you ask for support), (b) it is necessary for security purposes such as investigating abuse, (c) it is required to comply with applicable law, or (d) it is aggregated and anonymized and used for internal operations in line with applicable law.

How we store and protect it:

• Google access and refresh tokens are encrypted at rest (AES-256-GCM), used only on our servers, and never sent to your browser.
• Google user data is isolated per account — one customer can never see another customer's Google data.
• We store only what each feature needs: the connected account's email, the Search Console property you selected, the latest indexing-status result for pages you check, and the calendar events created by bookings. Search performance reports are fetched from Google when you view them and cached only briefly.
• Google user data is stored with our hosting and database providers (such as Supabase and Vercel), which process it only on our behalf to run these features.

Retention and deletion:

• We keep Google user data only while the related feature is connected.
• You can disconnect Google at any time from the relevant Settings page (WhatsApp → Settings → Integrations, or SEO Blog → Settings → Integrations). Disconnecting revokes our access at Google and deletes the stored tokens and the Google data cached for that feature.
• You can also remove our access from your Google Account at myaccount.google.com/permissions.
• If you delete your Irizpro account, all Google user data associated with it is deleted.
• You can also request deletion by emailing us at the address in the Contact Information section.

Irizpro's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies and Tracking

We use cookies and similar technologies for authentication and session management. Essential cookies are required for the platform to function properly. We do not use tracking cookies for advertising purposes.

Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encrypted data transmission (HTTPS/SSL)
• Secure password hashing
• Regular security audits and updates
• Access controls and authentication mechanisms

Data Retention

We retain your account information and transaction history for as long as your account is active or as needed to provide services. You can request account deletion at any time, though we may retain certain information for legal or business purposes (e.g., transaction records for tax compliance).

Google user data is not kept for these purposes; it is retained and deleted only as described in the Google User Data section.

Your Rights

You have the right to:

• Access and review your personal information
• Request correction of inaccurate data
• Request deletion of your account and data
• Export your data in a portable format
• Opt-out of marketing communications (if any)
• Withdraw consent for data processing where applicable

Third-Party Services

Our marketplace integrates with third-party services (Razorpay for payments, n8n for workflows, Supabase for authentication). These services have their own privacy policies, and we encourage you to review them:

• Razorpay Privacy Policy: https://razorpay.com/privacy/
• Supabase Privacy Policy: https://supabase.com/privacy
• LinkedIn Privacy Policy: https://www.linkedin.com/legal/privacy-policy
• Google Privacy Policy: https://policies.google.com/privacy

Children's Privacy

Our marketplace is not intended for users under the age of 18. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the marketplace after changes constitutes acceptance of the updated policy.

Contact Information