Privacy Policy

Last updated: April 9, 2026

Melade, Inc. (“Melade,” “we,” “us,” or “our”) provides the AgentGateway platform (the “Service”). This Privacy Policy explains what personal information we collect, how we use it, with whom we share it, and the choices you have. It applies to the Service and to our marketing website, but not to third-party sites or services that integrate with the Service.

By using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.

1. Information We Collect

We collect information in three ways: information you provide to us, information we collect automatically, and information we receive from third parties.

1.1 Information You Provide

When you register an account, purchase a subscription, or otherwise interact with the Service, we may collect:

Account and identity information such as your name, email address, password (stored in hashed form), organization name, and role. Billing information such as billing address, tax ID, and the last four digits and brand of your payment card (full card details are collected and stored by our payment processor, not by us). Configuration and content you provide to the Service, including agent configurations, workflow definitions, prompts, credentials you store in our credential management features, and any messages, files, or other content you submit through agent relays or agent email identities. Communications you send to us, including support requests, feedback, and survey responses.

1.2 Information Collected Automatically

When you access the Service, we automatically collect:

Usage data such as log entries, feature usage, API requests, error and diagnostic information, audit events, rate-limit counters, and health-score metrics. Device and connection data such as IP address, browser type and version, operating system, device identifiers, language preference, and referring URL. Cookies and similar technologies used to keep you signed in, remember preferences, measure usage, and secure the Service. You can control cookies through your browser settings, though some features of the Service may not function without them.

1.3 Information from Third Parties

We may receive information from third-party integrations and service providers that you choose to connect to the Service (for example, when you link an email provider, model provider, database, or messaging platform). We handle that information in accordance with this Policy and any applicable contractual terms with the third party.

2. How We Use Information

We use the information we collect to:

Provide, operate, maintain, and secure the Service, including authenticating users, processing API requests, routing agent traffic, sending and receiving agent emails, managing credentials, and enforcing rate limits. Bill you and process payments. Communicate with you about your account, the Service, security alerts, technical notices, and support responses. Monitor and improve the Service, including by analyzing usage trends, debugging, and developing new features. Detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms of Service or applicable law. Comply with legal obligations and enforce our agreements.

We process your personal information on the legal bases of performing our contract with you, our legitimate interests in operating and improving the Service, your consent where required, and compliance with legal obligations.

3. How We Share Information

We do not sell your personal information. We share information only as described below:

Service providers. We share information with vendors that help us operate the Service — such as cloud hosting, database, email delivery, payment processing, analytics, and customer support providers — under contracts that require them to protect the information and use it only to provide services to us.

Integrations you enable. When you connect the Service to a third-party integration, we share information with that integration as needed to perform the function you requested (for example, sending an email through an email provider or reading from a database you connect).

Legal and safety. We may disclose information if we reasonably believe it is required to comply with a law, regulation, legal process, or governmental request; to protect the rights, property, or safety of Melade, our users, or others; to enforce our Terms; or to investigate and prevent fraud or security issues.

Business transfers. If Melade is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction, subject to this Policy.

With your direction. We may share information at your direction or with your consent.

4. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When personal information is no longer needed, we delete or anonymize it. Backup copies may persist for a limited additional period before being overwritten in the ordinary course.

You may request deletion of your Customer Data by contacting us or using in-product controls where available, subject to any legal or contractual retention obligations.

5. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, and destruction. These include encryption in transit, access controls, audit logging, and regular review of our security practices. No system is perfectly secure, however, and we cannot guarantee absolute security. You are responsible for keeping your account credentials and API keys confidential.

If we become aware of a security incident affecting your personal information, we will notify you as required by applicable law.

6. International Data Transfers

Melade is based in the United States, and we and our service providers may process personal information in the United States and other countries. If you access the Service from outside the United States, you understand that your information may be transferred to and processed in jurisdictions that may have different data protection rules than those of your country.

7. Your Rights and Choices

Depending on where you live, you may have rights in relation to your personal information, including the right to:

Access a copy of the personal information we hold about you. Correct inaccurate or incomplete personal information. Delete personal information, subject to certain exceptions. Object to, or request restriction of, certain processing. Port your personal information to another service. Withdraw consent where we rely on consent as the legal basis for processing.

To exercise these rights, contact us at the address in Section 11. We may need to verify your identity before responding. You will not be discriminated against for exercising your rights. If you are unsatisfied with our response, you may have the right to lodge a complaint with a data protection authority in your jurisdiction.

California residents: To the extent the California Consumer Privacy Act applies, you have the rights described above, and we confirm that we do not “sell” personal information as that term is defined under California law.

8. Children's Privacy

The Service is not directed to, and we do not knowingly collect personal information from, children under the age of 13 (or the age of digital consent in your jurisdiction, if higher). If you believe we have collected information from a child in violation of this Policy, please contact us and we will take appropriate steps to delete it.

9. Third-Party Links and Services

The Service may contain links to third-party websites, services, and integrations. We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies before providing them with information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice (for example, by email or through the Service) before the changes take effect. The “Last updated” date at the top of this Policy indicates when it was last revised. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.

11. Contact Us

If you have questions or requests about this Privacy Policy or our privacy practices, please contact us at:

Melade, Inc.
Attn: Privacy
Email: privacy@agentgateway.com

Melade, Inc. is a Pennsylvania corporation. AgentGateway is a product of Melade, Inc.