Privacy Policy

1. Who We Are

Poppyfield AI (the "Service"), a product of Instamorphic Inc. ("Poppyfield," "we," "us," or "our"). We are committed to protecting your personal information and your right to privacy. If you have questions or concerns about this policy, please contact us at legal@poppyfield.ai.

2. Information We Collect

We collect information you provide directly and information generated by your use of the Service.

Information you provide

• Account registration data (name, email address, password).
• Payment information, when paid features are in use (processed by our payment provider; we do not store card numbers).
• Content you submit to agents (documents, text, files).
• Communications you send us (support tickets, feedback).

Information generated automatically

• Usage data: pages viewed, agents run, session duration, and interaction logs.
• Device and browser information: IP address, browser type, operating system.
• Cookies and similar tracking technologies (see Section 7).

3. How We Use Your Information

• To operate and improve the Service, including processing agent runs.
• To authenticate your identity and secure your account.
• To process payments and prevent fraud.
• To send transactional emails (receipts, password resets, security alerts).
• To send marketing communications, where you have opted in.
• To analyze aggregate usage and improve agent quality.
• To comply with legal obligations.

We will not use content you submit to an agent, or the output an agent generates for you, in a way that identifies you as an individual, including to train or improve any AI model, without your separate, opt-in consent. Any use of your data to improve the Service or agent quality relies on de-identified, aggregated data such as usage patterns and performance metrics.

4. How We Share Your Information

WE DO NOT SELL YOUR PERSONAL DATA. We may share information with:

• Creators — If you use an agent identified in its listing as built by an independent third-party creator, we share with that Creator only the inputs required to fulfill your specific run, and Creators are contractually prohibited from using your data for independent purposes. All agents currently available on the Service are built and operated by Poppyfield, so no such sharing takes place today.
• Infrastructure providers — cloud hosting (Google Cloud Platform), database, and storage services that process data on our behalf under data-processing agreements.
• Payment processors — to process transactions securely.
• Analytics providers — which process product usage data on our behalf to help us understand how the Service is used (see Section 7).
• Law enforcement or regulators — when required by applicable law or to protect the rights, property, or safety of Poppyfield AI or others.

5. Data Retention

We retain your account data for as long as your account is active. Conversation and agent-run data is retained for approximately 12 months to support dispute resolution and service improvement, after which it is deleted or anonymized. You may request earlier deletion at any time (see Section 8).

6. Data Security

We use industry-standard security measures including encryption in transit (TLS), encryption at rest, and access controls. No system is completely secure; please use a strong, unique password and report any suspected security incidents to legal@poppyfield.ai.

7. Cookies

We use essential cookies required for authentication and security, and optional analytics cookies to understand how the Service is used. You can disable non-essential cookies in your browser settings; doing so will not affect core Service functionality.

We use third-party analytics services to collect product usage data, including page views, clicks, and other interaction events, through cookies and similar technologies. This data is processed on our behalf to help us understand and improve how the Service is used. You can limit this collection by disabling non-essential cookies in your browser settings. You may also contact us at legal@poppyfield.ai with questions about analytics data.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data ("right to be forgotten").
• Port your data to another service.
• Object to or restrict certain processing.
• Withdraw consent at any time for consent-based processing.

To exercise any of these rights, email legal@poppyfield.ai. We will respond within 30 days.

9. Children's Privacy

The Service is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by email or a prominent notice on the Service at least 14 days before the change takes effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

11. Contact

Privacy questions or requests: legal@poppyfield.ai.
Mailing address: Instamorphic Inc. 2310 Homestead Rd. Ste C1-114, Los Altos, CA 94024, USA.