Privacy Policy

Effective July 22, 2026

GlassPalace is operated by Giorgio Gerelli in Italy. This policy describes how GlassPalace processes account, workspace, integration, and usage data during the public beta.

Data we process

We process identity and contact details, workspace membership, connected-account metadata, provider data requested by you or your agent, OpenAgent conversations and workspace memory, approvals, audit events, device sessions, and model usage. Provider credentials are encrypted and are not written into the OpenAgent filesystem.

Why we process it

We process data to authenticate users, operate isolated workspaces, synchronize connected services, execute authorized actions, prevent abuse, provide support, and measure model usage. We do not sell personal data or use connected business data to train public models.

Providers and international transfers

When you connect Shopify, Google, Postiz, Pipeboard, Meta, or another provider, data is exchanged according to the permissions you grant and that provider’s terms. Model prompts are sent only to the model provider selected for the workspace.

Retention and beta durability

Workspace deletion immediately revokes access and begins a seven-day primary-volume retention period before purge. The beta has no application-managed backup or disaster-recovery guarantee; loss of the hosting disk can permanently remove agent history and memory.

Your rights

You may request access, correction, export, restriction, or deletion by contacting privacy@glasspalace.uno. We will verify the requesting identity before acting.

Contact

Privacy questions can be sent to privacy@glasspalace.uno. The operator’s complete legal contact address will be published before third-party OAuth production review.