Aginera Privacy Policy

Kamna Ventures LLC d/b/a Aginera

Last Updated: Feb 1, 2026

This Privacy Policy explains how Kamna Ventures LLC, doing business as Aginera ("Aginera," "Kamna," "we," "us," "our") collects, uses, discloses, and protects information when you access or use our websites, applications, APIs, and related services (collectively, the "Services").

If you do not agree, do not use the Services.

1) Who We Are

Kamna Ventures LLC (d/b/a Aginera) is the entity responsible for this Policy.

Contact: support@aginera.ai

Address: 6701 Koll Center Pkwy, Suite 250, Pleasanton, CA 94566

If you use the Services through a company account, your organization may control certain data you submit (see Section 6).

2) Information We Collect

A. Information you provide

  • Account data: name, email, phone (optional), company name, role/title (optional), login credentials (stored in hashed form where applicable).
  • Billing data: billing contact details, billing address (optional), tax/VAT fields (if provided), payment status and transaction metadata.
  • Customer Content: project data and files you upload or submit (e.g., PDFs, drawings, CAD files, specs, takeoffs, BOMs, prompts/instructions, notes).
  • Support communications: messages, tickets, emails, meeting notes, and attachments you send.

B. Information collected automatically

  • Usage data: pages/screens viewed, features used, actions taken, timestamps.
  • Device/network data: IP address, browser type, device identifiers, OS, approximate location inferred from IP.
  • Cookies and similar tech: cookies, pixels, local storage (see Section 10).

C. Information from third parties

  • Payment processor: payment confirmation and billing metadata from Stripe.
  • Analytics: aggregated usage metrics from Google Analytics.
  • Integrations you enable: data from third-party systems you connect (if/when offered).

3) How We Use Information

We use information to:

  • Provide and operate the Services (including processing Customer Content to generate outputs).
  • Create/administer accounts and authenticate users.
  • Process payments, subscriptions, invoices, and taxes.
  • Provide support and respond to requests.
  • Monitor, secure, debug, and improve the Services (performance, reliability, fraud prevention).
  • Understand usage trends and measure site/app performance (analytics).
  • Send service notices, security alerts, and administrative communications.
  • Comply with law and enforce agreements.

4) AI Features and OpenRouter Processing

Some features use AI/LLMs to generate takeoffs, quantities, BOMs, comparisons, summaries, or other results ("Outputs").

When you use AI features:

  • We may send prompts and relevant excerpts of Customer Content to our AI routing provider OpenRouter to generate Outputs.
  • We send only what is reasonably necessary to fulfill the request and operate the feature.
  • Outputs are returned to the Services and associated with your account/workspace.

Important: Do not upload or include sensitive personal information unless necessary for your business use case and you have the right to do so.

(If you later adopt a "no-training" / "zero data retention" mode or specific provider settings, you can add that here as an explicit commitment.)

5) How We Share Information (No Sale of Personal Data)

We do not sell personal information.

We share information with:

  • Service providers (subprocessors): hosting, storage, monitoring, customer support, analytics, payment processing, and AI routing (see Appendix A).
  • Vercel: to deliver and operate our web application and related frontend services.
  • Microsoft Azure: to host backend infrastructure, databases, and application services.
  • Stripe: to process payments and manage billing.
  • Google Analytics: to measure traffic and usage patterns (see Section 10).
  • OpenRouter: to provide AI/LLM functionality (see Section 4).
  • Legal/safety: when required to comply with law or protect rights, safety, and security.
  • Business transfers: in connection with financing, acquisition, merger, or sale of assets (with appropriate safeguards).

6) Business Accounts and Customer Content

If you access the Services via an organization (the "Customer"), the Customer may:

  • control which users can access a workspace,
  • control what Customer Content is uploaded, and
  • request deletion/export consistent with your agreement.

If you are an end user and want to access/delete personal data contained in Customer Content, contact your organization first.

7) Data Retention

We retain personal information as long as needed to:

  • provide the Services,
  • comply with legal obligations,
  • resolve disputes and enforce agreements, and
  • maintain security and audit trails.

Retention depends on the data type and your account settings/contract:

  • Account data: retained while your account is active; limited retention after closure.
  • Customer Content: retained per your workspace settings/contract; may be deleted upon request/termination, subject to backup retention and legal/security requirements.
  • Logs/security records: retained for a limited period for security, abuse prevention, and reliability.

8) Security

We use reasonable safeguards designed to protect information, including access controls and monitoring. You are responsible for using strong passwords, safeguarding credentials, and configuring user permissions appropriately.

9) International Data Transfers

Your information may be processed in countries other than where you reside (including the United States) depending on where our providers operate. Where required, we use appropriate safeguards for cross-border transfers.

10) Cookies and Analytics (Google Analytics)

We use cookies and similar technologies for:

  • Essential functions: login, session management, security.
  • Preferences: remembering settings.
  • Analytics: understanding site/app performance and usage.

Google Analytics may set cookies and collect usage data (e.g., page views, session duration, device/browser info). You can control cookies via browser settings and, where available, our cookie preferences banner.

If you want, add a cookie banner with "Accept / Reject Analytics" for regions where consent is expected.

11) Your Rights

Depending on your location, you may have rights to:

  • access, correct, delete, or restrict processing of your personal data,
  • object to processing,
  • request portability, and
  • withdraw consent where processing is based on consent.

Request via privacy@aginera.ai. We may verify identity and may deny requests where permitted by law (e.g., security, legal retention).

12) California Disclosures (CCPA/CPRA)

We collect the categories described in Section 2 (identifiers, commercial info, internet/network activity, approximate location, professional info, and Customer Content as provided).

We do not sell personal information.

If our analytics/ads setup later qualifies as "sharing" under CPRA, we will provide an opt-out mechanism ("Do Not Sell or Share").

Submit requests: support@aginera.ai.

13) Children

The Services are intended for business use and not for children under 13 (or the minimum age required by your jurisdiction). We do not knowingly collect personal data from children.

14) Changes to This Policy

We may update this Policy from time to time. The "Last Updated" date reflects the latest revision. Continued use of the Services after changes become effective means you accept the updated Policy.

15) Contact

Kamna Ventures LLC (d/b/a Aginera)

6701 Koll Center Pkwy, Suite 250, Pleasanton, CA 94566

Email: support@aginera.ai

Appendix A — Subprocessors (Service Providers)

Below is a list of key subprocessors we use to operate the Services. This list may be updated from time to time.

Stripe – payment processing and billing

Purpose: process payments, subscriptions, invoicing metadata

Data: billing contact info, payment status, transaction metadata (payment card data handled by Stripe)

Google Analytics (Google LLC) – analytics and performance measurement

Purpose: understand site/app usage and performance

Data: cookies, device/browser info, IP-derived location, usage events (as configured)

Microsoft Azure (Microsoft) – backend hosting/infrastructure

Purpose: hosting, storage, compute, databases, logging (as configured)

Data: account data, Customer Content, system logs (as applicable)

Vercel – web app hosting and delivery

Purpose: host and serve frontend, edge delivery, build/deploy infrastructure

Data: device/network info, app interactions needed to deliver the site/app, logs (as configured)

OpenRouter – AI/LLM routing provider

Purpose: send prompts and relevant context to LLMs to generate Outputs

Data: prompts, relevant excerpts of Customer Content needed for the request, and responses