Privacy Policy

BlackHoodie Command Center is a platform where businesses deploy AI agents that converse with their customers over email and chat. For your account data, we are the data controller. For the content your workspace brings — your contacts and their conversations — you are the controller and we process it on your instructions to provide the Service.

• Account data — your email address and name, and workspace membership.
• Workspace content — the contacts, conversations, agent configurations, and connected data your workspace brings to the Service.
• Usage metering — counts of messages, model tokens, and feature usage, used for billing, caps, and reliability.
• Payment data — handled entirely by Stripe. We store your subscription status and invoice references, never card numbers.

We use your data to provide and secure the Service: running your agents, storing conversations, metering usage, billing, preventing abuse, and supporting you. Conversation context is sent to the AI providers listed below to generate agent responses — that is the AI processing you sign up for.

We do not sell your data. We do not use your customer data to train AI models, and our provider agreements are configured accordingly.

We rely on a short list of vendors to run the Service. Each processes data only to provide their function to us:

Your data is stored on managed Postgres in the US region. We will update this list before adding a sub-processor that handles workspace content.

We keep your data for the lifetime of your active account. You can export or permanently purge workspace data at any time using the in-product tools in Settings. After a deletion, copies in encrypted backups cycle out within 35 days.

You can access, export, and delete your data yourself via Settings — export produces a machine-readable archive, and deletion is a real purge, not a soft hide. If you need help, or want to exercise rights under GDPR, CCPA, or similar laws (access, correction, deletion, portability, objection), email info@blackhoodie.io and we will respond within the timelines those laws require. If your customers contact us directly about data your workspace holds, we will refer them to you as the controller and assist you.

We use essential session cookies only — the ones that keep you signed in. No advertising trackers, no third-party analytics cookies, no cross-site tracking. Because there is nothing to opt out of, there is no cookie banner.

The Service is built for businesses and is not directed at children. Do not use it if you are under 16, and do not use it to knowingly collect data from children under 16. If we learn we hold such data, we will delete it.

If we make material changes — new data categories, new sub-processors handling workspace content, or new uses — we will notify you by email or in the product before the change takes effect. The effective date at the top always reflects the current version.

BlackHoodie LLC · North Haven, Connecticut · info@blackhoodie.io