1. Overview & Privacy Commitment
At Comate (“Comate”, “we”, “our”), privacy and security are fundamental architectural invariants. Comate is engineered as an agent-first desktop browser designed to keep your browsing history, credentials, and confidential data private. This Privacy Policy describes how we collect, use, and protect your information across our website (https://accounts.cencera.xyz) and desktop application.
2. Zero-Knowledge Credential Security
Comate adheres to a strict Zero-Knowledge Credential Security Invariant:
- Master passwords, website logins, and sensitive tokens are encrypted locally on your device using AES-256-GCM.
- Passwords and master credentials never enter LLM prompt contexts, token logs, WebSocket transmissions, or server transcripts.
- Browser automation interactions requiring authentication are performed via local sandboxed autofill or paused for direct human login.
3. Information We Collect
We collect only the minimal information required to provide our Services:
- Account Information: Name, email address, password hash (or Google OAuth profile ID) to authenticate your user account.
- Subscription Status: Active plan tier, expiration dates, and allocated monthly credit limits. We do not store or process raw credit card numbers.
- AI Model & Usage Metrics: Token counts and credits consumed, strictly for balance tracking and rate-limit enforcement.
4. Payment & Billing Privacy
Paid plan activations and custom credit pack requests are handled directly between you and Cencera Inc. via manual arrangement and direct invoicing. We never store credit card numbers on our servers.
5. Data Retention & Deletion
You have the right to request deletion of your account and personal data at any time. When you delete your account, your user records and cloud sync storage are permanently purged within 30 days.
6. Contact Us
If you have questions or concerns about this Privacy Policy, please email our privacy team at privacy@cencera.xyz or support@cencera.xyz.