Privacy Policy.

Last updated: May 2026. This policy explains what data The Intern collects, how it is used, and your rights.

Data we collect

Account data: email, name, Firebase UID, role, credit balance, preferences JSON. Agent data: configurations, templates, user agents, skills. Conversation data: conversations, messages, tool calls. Memory: agent_memory entries, workspace_files, knowledge_chunks with embeddings. Contacts: agent_contacts with lead scores and deal stages. Usage: credit_transactions, jobs, call_logs, scheduled_tasks.

How we use it

To operate the platform: authenticate requests, run agent conversations, store memory, process payments. To improve reliability: monitor error rates, track API latency, identify failing jobs. We do not use your data to train AI models. We do not sell your data. We do not share it with advertisers.

Third-party processors

Anthropic: your messages are sent to generate AI responses (zero-data-retention policy when using platform key). Cloudflare: infrastructure provider (Workers, Pages, Queues, Durable Objects). Neon: PostgreSQL database hosting. Firebase (Google): authentication. Twilio: phone calls (optional). Stripe: payment processing (optional).

Data retention

Conversations and messages are retained for the lifetime of your account — we do not expire them by age. Call transcripts and recording URLs are cleared after 90 days. Generated image data is cleared after 30 days (the record of what was generated is kept). Background job payloads are cleared 30 days after the job finishes. Credit transaction records are retained for 7 years for financial compliance. Erasing your account removes all of it immediately, regardless of age.

Your rights

Export: GET /api/account/export returns your data as JSON. It covers every table that references you — agents, conversations, messages, memories, leads, goals, workspace files, credit history — and deliberately excludes API keys, OAuth tokens and integration secrets, so the file is safe to store. Delete: DELETE /api/account erases every row referencing you across all tables and completes synchronously, not within 24 hours. Both are also available in the product at Settings → Data & Privacy. Third-party data principals: most people in this system never signed up — scraped leads, contacts and inbound callers hold the same erasure right and cannot authenticate to exercise it, so the organisation holding their data acts on their behalf via DELETE /api/account/subject with an email or phone. It searches only that organisation's own records and logs a hashed proof, never the identifier itself. Contact privacy@theintern.ai to have any of these run on your behalf, or for anything the API cannot do.