Privacy Policy

Effective: April 22, 2026

The short version: The Wisdom Layer SDK runs entirely on your infrastructure. We never see, collect, or store your agent data. The only data we process is what you provide to create and manage your account.

1. Who We Are

Rhatigan Labs LLC ("we", "us") provides the Wisdom Layer SDK, a Python library for AI agent memory and reflection. Our website is wisdomlayer.ai.

2. What We Collect

We collect only the minimum data needed to operate the service:

Account data:

Email address (provided at signup)
Subscription tier and billing status
License key metadata (key prefix, tier, creation date, last validation)
ToS acceptance timestamp

Billing data:

Processed by Stripe. We do not store credit card numbers, CVVs, or bank account details. See Stripe's Privacy Policy.

License validation logs:

IP address and timestamp of license validation requests (retained 90 days)
Used solely for abuse detection and rate limiting

3. What We Do NOT Collect

We do not collect, access, or store: agent memories, directives, dream journals, provenance logs, conversation content, embeddings, user prompts, LLM responses, or any data your agents process. The SDK runs on your hardware. Your data stays on your hardware.

4. How We Use Your Data

Account management and license key provisioning
Billing and payment processing (via Stripe)
Product announcements and security notifications (email, opt-out available)
Abuse prevention and rate limiting

5. Data Sharing

We share data only with:

Stripe — payment processing
Supabase — account database hosting (US region)

We do not sell, rent, or trade your personal information.

6. Data Retention

Account data: retained while your account is active, plus 30 days after deletion
Validation logs: 90 days
Billing records: as required by law (typically 7 years)

7. Your Rights

You may:

Access your account data by emailing us
Correct inaccurate information
Delete your account (email jeff@rhatigan.ai)
Export your account data
Opt out of non-essential communications

For GDPR data subject requests regarding data processed by the SDK (which runs on your infrastructure), see the SDK documentation on memory.forget_subject() and memory.export_subject().

8. Security

License validation API uses HTTPS exclusively
Database hosted on Supabase with encryption at rest
No plaintext secrets in the SDK; all keys are environment variables
Stripe webhook signatures verified on every event

9. Cookies

wisdomlayer.ai does not use cookies or tracking scripts. We do not use analytics services. There are no third-party trackers on our site.

10. Children

The Software is not directed at children under 13. We do not knowingly collect data from children.

11. Changes

We may update this policy. Material changes will be communicated via email. The effective date at the top reflects the latest revision.

12. Contact

Questions or requests? Email jeff@rhatigan.ai.