SuperheroAgent

SuperheroAgent.ai (“SuperheroAgent”, “we”, “us”) provides a platform of specialist AI agents that act on your behalf inside guardrails you control. This policy explains what we collect, how we use it, and the controls you have. Your data is used to do your work — never to train shared models.

Information We Collect

We collect the following categories of data:

1. Account & workspace data — name, email, organization, role, and billing details.
2. Content you provide — the instructions, knowledge bases, brand voice, and files you give your agents.
3. Agent activity — the audit trail of actions your agents take, so every action is attributed and reversible.
4. Optional facial avatars — a face image you may upload as an agent’s portrait. See Facial Avatar below.
5. Usage & device data — standard logs used to keep the service secure and reliable.

How We Use It

We use your data to operate the service, carry out the tasks you assign your agents, secure the platform, provide support, and meet legal obligations.

High-risk or irreversible actions route through a human approval gate unless you explicitly allow them.

What We Do Not Do

In particular:

1. We do not train shared or foundation models on your data or content.
2. We do not sell your personal data.
3. We do not use uploaded face images for facial recognition, identity verification, or ad targeting.

Security & Data Residency

Data is encrypted in transit and at rest, isolated per tenant, and access is least-privilege. Configurable data residency is available on Enterprise.

Human oversight is designed to the NIST AI RMF and EU AI Act Article 14, with approval gates and a kill switch you own.

Your Rights & Controls

You can access, correct, export, or delete your data, and pause or stop any agent at any time. Deleting content — including a facial avatar — removes the stored item.

Facial Avatar

You may optionally upload a face image to use as an agent’s portrait. A face photo is personal, biometric-adjacent data, so we handle it with specific, limited rules. By uploading a face image you consent to the terms in this section; you can withdraw that consent at any time by removing the image.

The specific rules are:

1. What we store — the image file you choose, downscaled to a small avatar. Nothing else is extracted from it.
2. How it’s used — only as the chosen agent’s portrait inside your workspace. We do not use it for facial recognition, biometric-template extraction, identity verification, ad targeting, or to train any AI model.
3. Where it lives — stored for your workspace and shown to your workspace members. It is never sold or shared with third parties for their own use.
4. Consent — you must actively affirm consent before choosing a face image; we record the consent event (timestamp and policy version).
5. Your control & deletion — you can replace or remove the face at any time from the agent’s appearance panel. Removing it deletes the stored image from active systems, and from backups within our standard rotation.
6. Your responsibility — upload only an image you have the right to use. If it depicts another person, you confirm you have their permission.

In jurisdictions with specific biometric-privacy laws (for example, Illinois BIPA or Texas CUBI): we do not create or store biometric identifiers or biometric information from uploaded images; the image is retained solely as a display avatar.

Changes

We’ll post updates here and revise the effective date. Material changes affecting facial avatars will be surfaced in-app.

Questions, or a request to access or delete your data? Email privacy@superheroagent.ai. You can also manage and delete uploaded content — including facial avatars — from within the app at any time.