Audunn

Privacy Policy

Last updated: 2026-07-16

This policy is for creators who sign up for Audunn to build AI agents for their own audiences. If you are an End User of a creator's agent, see that creator's own privacy policy.

1. Who we are

Audunn is operated by Audunn, Jarlsberggade 5B, 4.2, 5000 Odense C, Denmark. Contact: audunn@realaudunn.com.

2. What we collect from creators

Account data: email, name, hashed password.
Configuration: your agents, prompts, knowledge, branding, settings.
Billing: your Stripe identifiers. Card details are handled by Stripe, never stored by us.
Your Anthropic key: encrypted at rest with AES-256-GCM, decrypted only server-side at call time.
End-user data you access: through your dashboard you can view your own members' conversations.

We do not use tracking cookies, third-party analytics, or advertising identifiers.

3. Your role as controller

When you deploy an agent to End Users you are the data controller for their personal data and we act as your processor. The Data Processing Agreement governs this. You are responsible for your End Users' privacy notice, consent, and data-subject requests (we give you export and delete tooling).

4. Cookies

One strictly necessary cookie keeps you signed in. No analytics or tracking cookies.

5. Sub-processors

Provider	Purpose	Location
Anthropic	Claude AI responses (via your key)	United States
Supabase	Database, auth, storage	Ireland (EU)
Stripe	Payment processing	United States
Resend	Transactional email	United States
Vercel	Application hosting	United States

We are Claude-only and bring-your-own-key. We do not send your data to OpenAI, Google, or any China-based provider.

6. Security

Passwords hashed by Supabase Auth. Your Anthropic key encrypted at rest (AES-256-GCM). All connections use TLS/HTTPS. Database encryption at rest via Supabase.

7. Your rights

You can export or delete your creator account from Settings. If you are in the EEA, UK, Switzerland, or California, you have additional rights under GDPR or CCPA/CPRA; contact us to exercise them.

8. Retention

We keep your account data until you delete your account. Billing records are kept as required by law. Deleted data is removed within 30 days, except records the law requires us to keep.

9. International transfers

We are established in Denmark and your database is hosted in Ireland, both in the EEA. Some sub-processors (Anthropic, Stripe, Resend, Vercel) are US-based; transfers to them from the EEA/UK/Switzerland rely on Standard Contractual Clauses and applicable frameworks with each sub-processor.

10. Changes

Material changes are emailed before they take effect. Minor changes update the date above.

11. Contact

For any privacy question, email audunn@realaudunn.com. We respond within 30 days. As Audunn is established in Denmark (EEA), no Article 27 representative is required.