Privacy Policy
Your trust is the foundation of the control plane. This policy explains what we collect, how we use it, and the rights you have over your data.
Last updated: June 27, 2026
1. Information We Collect
Actori is operated by Aonuva Inc. ("Aonuva", "we", "us"). When you request access to or use Actori, we collect information you provide directly, such as your name, work email, company, and role. We also collect operational data generated through your use of the platform — including agent action logs, policy configurations, and audit trails.
We automatically collect technical information such as IP address, browser type, device identifiers, and usage patterns to keep the service secure and reliable.
2. Categories of Personal Information We Collect
Under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), we collect the following statutory categories of personal information: identifiers (such as name, email, IP address, and account identifiers); commercial information (such as services purchased or evaluated); internet and network activity (such as usage and interaction with our platform); professional or employment information (such as company, role, and title); and inferences drawn from the above.
We collect this information from you directly, automatically through your use of the service, and from third-party sources such as identity providers and analytics partners. We do not collect sensitive personal information for the purpose of inferring characteristics about you.
3. How We Use Your Information
We use your information for the following business and commercial purposes: to operate and improve the Actori control plane; to provide governance and observability features; to authenticate agent identities, enforce policies, and maintain audit records; to secure the service and prevent fraud; and to comply with legal obligations.
We may use your contact details to respond to inquiries, send service updates, and communicate about early access and design partnership programs.
4. Cookies & Tracking Technologies
We and our service providers use cookies and similar technologies to keep you signed in, remember preferences, measure usage, and improve performance. Strictly necessary cookies are required for the service to function and are always active.
When you first visit our site, we present a cookie consent banner that lets you accept all cookies or reject non-essential (such as analytics) cookies. Non-essential cookies are only set after you provide consent, and your choice is stored so we can honor it on future visits. You can change your preferences at any time by clearing the cookie or contacting us, and you can also control cookies through your browser settings; disabling some cookies may affect functionality.
We honor Global Privacy Control (GPC) signals where required by law as a valid request to opt out of the sale or sharing of personal information.
5. Agent Action Data
Actori sits in the path of agent actions across your enterprise systems. Action metadata — what was attempted, by which agent identity, when, and whether it was allowed — is logged so you maintain a complete, replayable audit trail.
We treat this data as your data. We do not sell it, and we do not use the contents of your agent actions to train models without your explicit consent.
6. Data Sharing & Disclosure
We do not sell or share your personal information for cross-context behavioral advertising, and we have not done so in the preceding 12 months. We disclose personal information only to service providers and contractors who help us operate the platform under contractual confidentiality and data-protection obligations, or when required by law.
In the event of a merger, acquisition, or asset sale, your information may be transferred, and we will notify you before it becomes subject to a different privacy policy.
7. Your California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the right to: know and access the categories and specific pieces of personal information we collect; delete personal information we hold about you; correct inaccurate personal information; opt out of the sale or sharing of personal information; and limit the use and disclosure of sensitive personal information.
Because we do not sell or share personal information and do not use sensitive personal information for purposes that require an opt-out, no "Do Not Sell or Share My Personal Information" action is required — but you may still contact us to confirm. We will not discriminate against you for exercising any of these rights.
You may exercise these rights yourself or through an authorized agent using either of our two designated methods: emailing us at privacy@actori.ai, or submitting our online request form at /contact. We will verify your identity before responding and aim to respond within 45 days, with one extension permitted where reasonably necessary. Under California’s "Shine the Light" law (Civil Code § 1798.83), you may also request information about disclosures to third parties for their direct marketing purposes; we do not engage in such disclosures.
8. Data Security
We implement industry-standard technical and organizational safeguards, including encryption in transit and at rest, scoped access controls, and continuous monitoring. No method of transmission or storage is fully secure, but we work continuously to protect your data.
9. Data Retention
We retain personal and operational data for as long as your account is active or as needed to provide the service. Audit logs may be retained longer to meet compliance and contractual requirements. When data is no longer needed, we securely delete or anonymize it. You may request deletion subject to legal obligations.
10. Other U.S. State Privacy Rights
If you are a resident of another U.S. state with a comprehensive privacy law (such as Virginia, Colorado, Connecticut, Utah, or Texas), you may have similar rights to access, correct, delete, and obtain a portable copy of your personal information, and to opt out of targeted advertising or the sale of personal information. To exercise these rights, email us at privacy@actori.ai or submit our online request form at /contact. We will not discriminate against you for doing so.
11. Children’s Privacy
Actori is a business product not directed to children. We do not knowingly collect personal information from anyone under 16. If we learn that we have collected such information, we will delete it. If you believe a minor has provided us personal information, please contact us.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you directly.
13. Contact Us
Actori is operated by Aonuva Inc. If you have questions about this Privacy Policy, wish to exercise your privacy rights, or want to reach our data protection contact, you can reach us through either of two methods: email us at privacy@actori.ai, or submit our online contact form at /contact.