Privacy Policy

1. Introduction

Taur, Inc. ("Taur," "we," "us," or "our") operates the Taurus platform, an AI agent orchestration service available at taurusagents.com, app.taurusagents.com, taur.inc, and our other websites (collectively, the "Service"). This Privacy Policy explains how we collect, use, share, and protect information when you visit our websites or use the Service.

This Privacy Policy applies to all users of the Service, including visitors to our marketing pages, users on waitlists, and registered account holders. It does not apply to third-party services linked from our platform, which are governed by their own privacy policies.

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Service.

2. Information We Collect

We collect information in the following categories:

Information You Provide

• Account Information. When you create an account, we collect your email address, username, and authentication credentials. Passwords are stored in hashed form.
• Content. The Service allows you to create and manage AI agents. We collect the content you provide in the course of using the Service, including agent configurations, messages and prompts you submit, AI-generated responses, and files stored in your workspaces. You control what content you provide to the Service.
• Financial Information. If you subscribe to a paid plan or add funds to your account, we collect payment and subscription records processed through our payment processor, wallet balances, and transaction history. We do not directly collect or store complete credit card numbers — these are handled by our payment processor.
• Third-Party Credentials. You may choose to provide API keys or authorize connections to use your own subscriptions with third-party AI providers. These credentials are stored on our infrastructure and used solely to process your requests through the services you designate.
• Connected Infrastructure. If you connect external servers or execution targets to the Service, we collect the configuration details and operation logs necessary to manage those connections.
• Voice Data. If you use speech-to-text features, audio from your microphone is streamed in real time to a third-party transcription provider for processing. We do not store your audio recordings.
• Publicly Published Content. Your agents may publish content to public dashboard URLs hosted on our infrastructure. Content published to public URLs is accessible to anyone with the link, and you are responsible for the content your agents publish.
• Waitlist and Pre-Account Information. If you join a waitlist or express interest before creating an account, we may collect your name, email address, and stated use case.

Information Collected Automatically

• Technical Information. When you access the Service, we automatically collect your IP address, browser type and version, device information, operating system, and referring URL.
• Authentication Logs. We maintain logs of authentication events (such as logins and session activity) for security and abuse-prevention purposes.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service. To operate, maintain, and deliver the features of the Service, including processing your prompts through AI model providers, executing agent tasks, managing workspaces, and delivering results.
• Payments and Subscriptions. To process payments, manage your subscription, maintain wallet balances, and provide transaction records.
• Security. To authenticate your identity, protect accounts, detect and prevent fraud or abuse, and maintain the security and integrity of the Service.
• Communications. To send transactional messages such as account verification emails, password resets, billing receipts, and service notifications. We may also send you marketing and product communications; you can opt out at any time via the unsubscribe link in any such email or through your account settings.
• Analytics. We currently use self-hosted, cookieless analytics on our marketing and pre-login pages to understand how visitors find and use our signup flow. These analytics do not track logged-in users and do not use cookies.
• Advertising and Campaign Measurement. To promote the Service and to measure how our advertising campaigns perform, including how many people who arrived from a campaign went on to register. Where required by law, we do this only with your consent, as described in Section 5.
• Service Improvement. To improve and develop the Service using aggregate or de-identified usage data. We do not currently use your content to train our own AI models. If this practice changes, we will provide notice and an opportunity to opt out before your content is used for that purpose.
• Legal Compliance. To comply with applicable laws, regulations, and legal processes, and to enforce our Terms of Service.

4. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

• AI Model Providers. Your prompts and related content are transmitted to the AI model provider you select (such as Anthropic, OpenAI, Google, and others listed on our platform), including routing intermediaries such as OpenRouter, which forward requests to underlying model providers. Each provider processes that data under its own terms and privacy policy. We recommend reviewing the privacy practices of any provider you choose to use.
• Payment Processor. We share billing and subscription information with Stripe to process payments, manage subscriptions, prevent fraud, and comply with financial regulations.
• Service Providers. We engage third-party service providers to perform functions on our behalf, including cloud hosting, email delivery, web search, content retrieval, and speech transcription. These providers are authorized to use your information only as necessary to provide services to us and are contractually obligated to protect it. A summary of our current service providers is provided in the Appendix.
• Advertising Providers. Where advertising cookies are permitted as described in Section 5, our advertising provider (X Corp.) receives information about your visit to our marketing pages through its advertising pixel, such as your IP address, browser and device information, and the pages you viewed. We do not provide advertising providers with your account information, your email address, any hashed form of it, or your content.
• Legal Requirements. We may disclose information if we believe in good faith that disclosure is required or permitted by law, regulation, subpoena, court order, or other legal process, or is reasonably necessary to protect the rights, property, or safety of Taur, our users, or the public.
• Business Transfers. If Taur is involved in a merger, acquisition, bankruptcy, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your personal information becomes subject to a different privacy policy.
• With Your Consent. We may share your information for purposes not described in this Privacy Policy with your explicit consent.

5. Cookies and Analytics

Cookies. We and our service providers may use cookies, pixels, and similar technologies, including third-party analytics and advertising or attribution tools, to operate, improve, and market the Service. Where required by law, we will present a consent mechanism before setting non-essential cookies.

We currently use the following first-party cookies:

Advertising Cookies. With your consent, we use the X (Twitter) advertising pixel on our marketing pages. It sets cookies belonging to X Corp., both on X's own domain and on this website, and is used solely for advertising and campaign measurement — to understand how many people who arrived from one of our campaigns went on to register. We do not provide advertising providers with your email address, your phone number, or any hashed form of them, and we do not use these technologies on the logged-in pages of the Service.

Where required by law, we ask for your consent before these cookies are set, and they are not set unless you accept. You may grant or withdraw consent at any time at taurusagents.com/privacy-choices. We also honor Global Privacy Control (GPC) browser signals automatically: where a browser sends a GPC signal, advertising cookies are not set and you are not asked for consent.

We currently use the following advertising cookies for this purpose:

If you reach our site from one of our advertising campaigns, the campaign click identifier contained in the link you followed may be stored in your browser for the duration of your visit and passed to our signup pages, so that a registration can be attributed to the campaign it came from. This happens only where advertising cookies are permitted.

If you withdraw your consent, the advertising cookies set on this website are deleted and the pixel is not loaded again. Cookies set on X's own domain are outside our control and can be cleared through your browser's settings.

Apart from the advertising cookies described above, we do not use third-party cookies or cross-site tracking technologies.

Analytics. We currently use self-hosted, cookieless analytics on our marketing and pre-login pages. These analytics collect aggregate information about page visits and referral sources to help us understand how visitors discover the Service. They do not track individual logged-in users, do not use cookies, and do not share data with third parties.

Our cookie and analytics practices may change over time. Material changes will be communicated in accordance with Section 9.

6. Data Retention

We retain your information for as long as your account is active or as reasonably needed to provide the Service. We also retain information as necessary to comply with legal obligations (including financial record-keeping requirements), resolve disputes, prevent fraud, and enforce our agreements.

Upon request to delete your account, your data will be removed from our active systems within 30 days of the request being processed. Certain data may be retained longer where required by law (for example, financial transaction records). Backup copies are cycled out in accordance with our standard retention schedule.

Content you publish to public dashboard URLs may have been accessed, cached, or copied by third parties before deletion, and we cannot control third-party copies.

7. Data Security

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect your information against unauthorized access, alteration, disclosure, or destruction. These safeguards are regularly reviewed and updated as appropriate.

No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and any API keys or tokens you store on the Service. If you believe your account has been compromised, please contact us immediately.

8. Your Rights

All Users. Regardless of where you are located, you may request access to, correction of, or deletion of your personal information by contacting us using the information in Section 10. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

California Residents (CCPA/CPRA). If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended:

• Right to Know. You may request information about the categories of personal information we have collected, the purposes for collection, and the categories of third parties with whom we share it.
• Right to Delete. You may request deletion of your personal information, subject to certain exceptions.
• Right to Opt Out of Sale or Sharing. We do not sell personal information for money. Our use of third-party advertising cookies, described in Section 5, may constitute "sharing" for cross-context behavioral advertising under California law. You may opt out at any time at taurusagents.com/privacy-choices, and we treat Global Privacy Control browser signals as an opt-out request.
• Right to Non-Discrimination. We will not discriminate against you for exercising your privacy rights.

To submit a verifiable consumer request, please contact us using the information in Section 10. We may need to verify your identity before processing your request.

European Economic Area and United Kingdom (GDPR). If you are located in the EEA or UK, we process your personal data on the following legal bases: (a) performance of our contract with you (to provide the Service); (b) our legitimate interests (to operate, secure, and improve the Service), where those interests are not overridden by your rights; (c) your consent, where specifically requested; and (d) compliance with legal obligations.

You have the right to:

• Access, correct, or request erasure of your personal data.
• Restrict or object to certain processing of your personal data.
• Receive your personal data in a structured, commonly used, machine-readable format (data portability).
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with a supervisory authority.

Where we transfer personal data outside the EEA or UK, we rely on Standard Contractual Clauses or other transfer mechanisms approved under applicable data protection law.

To exercise any of these rights, please contact us using the information in Section 10.

Other Jurisdictions. We are committed to complying with applicable privacy and data protection laws in the jurisdictions where we operate. If you have questions about your rights under local law, please contact us.

9. Children's Privacy

The Service is not directed to individuals under the age of 16, and we do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe a child under 16 has provided us with personal information, please contact us using the information in Section 10.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technologies, legal requirements, or other factors.

For material changes, we will provide at least 30 days' advance notice by email or by posting a prominent notice on the Service before the changes take effect. Non-material changes (such as formatting or clarifications that do not affect your rights) may be made without advance notice.

Your continued use of the Service after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. Prior versions of this Privacy Policy are available upon request.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Taur, Inc.
2810 N Church St STE 88531
Wilmington, DE 19802

Email: support@taurusagents.com
Privacy and Legal Inquiries: legal@taur.inc

Appendix: Service Providers

The following is a summary of the third-party service providers we currently engage to operate the Service. This list may be updated from time to time as we add or change providers; changes to this list alone are not considered material changes to this Policy.

© 2026 Taur, Inc. All rights reserved.