PapayaPapaya

Legal

Privacy Policy

Last updated August 4, 2026

This Privacy Policy ("Policy") describes how Nile AI Inc. (doing business as Papaya) and its related companies ("Papaya," "we," "us," or "our") collect, use, and share personal information of users (i) of https://papaya.fyi/ and any of its subdomains (the "Site") and/or (ii) who purchase or otherwise access Papaya's AI agent optimization platform and related services (the "Services"). This Policy does not apply to websites that display different statements. This Policy may not cover data submitted through or otherwise made available to Papaya which is subject to a written agreement between Papaya and our customers. Where Papaya processes personal information on behalf of customers as a data processor, the terms of that agreement govern such processing.

1. What We Collect

We collect information about you in the following ways:

Information You Give Us

We collect information you directly provide to us, including your name, email address, company name, and other information submitted when registering for an account, contacting us, or using our Services.

Information We Get from Others

We may receive information about you from third parties, such as analytics providers or business partners, and may combine this with information we already hold about you.

Information Automatically Collected Through the Site

When you visit our Site, we automatically collect information about your device and usage, including operating system type, browser type and language, referring URLs, pages viewed, time spent on pages, and access timestamps. We may also receive data from analytics providers.

Information Collected Through the Services

When you use the Papaya platform, we automatically collect operational and analytical data to operate and improve the Services. This includes usage statistics, performance data, and system logs. Agent Trace Data and Customer Content, Papaya's core service, involves processing agent traces submitted by customers ("Agent Trace Data"). This data originates from AI agents running in customers' environments and is transmitted to Papaya for analysis and optimization.

We treat Agent Trace Data as follows:

  • We apply automated processes to identify and remove information that appears to constitute personal data ("PII Scrubbing") before Agent Trace Data is stored or processed further.
  • Due to the varied and unpredictable nature of AI agent outputs, we cannot guarantee that all personal information will be identified and removed. Customers are responsible for configuring their agents and using the PII scrubbing tools we provide to minimize personal information in Agent Trace Data before transmission.
  • We use Agent Trace Data solely to provide, maintain, and improve the Services and do not use it for purposes unrelated to the delivery of the Services.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our Site. Cookies are small data files placed on your device. We use session cookies (which expire when you close your browser) and persistent cookies (which remain until deleted) to personalise your experience and understand how you use our Site. We or our service providers may use these technologies to track activity across our Site for analytics purposes. You can manage your cookie preferences through your browser settings.

Session Replay

We may use session replay technologies that record user interactions with the Site, including clicks, mouse movements, scrolls, and keystrokes. These recordings are used solely to identify usability issues and improve the Site experience.

2. Use of Personal Information

We use the personal information we collect for the following purposes:

  • To operate, maintain, and improve our Site and Services.
  • To provide and deliver the Services customers request, including running our AI agent optimisation platform.
  • To respond to comments, questions, and support requests.
  • To send communications including account confirmations, invoices, technical notices, security alerts, and administrative messages.
  • To communicate about new features, product updates, and other information about our Services where permitted.
  • To protect, investigate, and deter against fraudulent, unauthorised, or illegal activity.
  • To comply with applicable legal obligations.
  • To conduct internal analytics to understand how our Site and Services are used.

3. Sharing of Personal Information

We do not sell personal information. We may share personal information in the following circumstances:

  • Service Providers. We share personal information with third parties who perform services on our behalf, such as cloud hosting (including AWS), analytics, email delivery, and customer support. These parties are contractually required to protect personal information and use it only for the purposes for which it was disclosed.
  • Business Transfers. We may share or transfer personal information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
  • Legal and Compliance. We may disclose personal information where required to comply with applicable law, regulation, legal process, or governmental request; to enforce our agreements and policies; or to protect the rights, property, or safety of Papaya, our customers, or the public.
  • Aggregated or Anonymised Data. We may share data that has been aggregated or de-identified such that it can no longer reasonably identify an individual, for research, analytics, or product improvement purposes.
  • With Your Consent. We may share personal information with your consent or at your direction.

4. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law. The factors we consider when determining retention periods include:

  • The purpose for which the information was collected and whether that purpose has been fulfilled.
  • Contractual obligations, including those set out in customer agreements.
  • Legal, regulatory, tax, or accounting obligations that require retention for a minimum period.
  • Data subject requests to delete or restrict processing. Agent Trace Data is retained only for as long as necessary to provide the relevant Services and is subject to our PII Scrubbing procedures described in Section 1.

5. Your Rights and Choices

You may contact us at any time to:

  • Request access to the personal information we hold about you.
  • Request correction of inaccurate or incomplete information.
  • Request deletion of your personal information, subject to applicable legal exceptions.
  • Opt out of marketing communications (all marketing emails include an unsubscribe link; opting out will not affect transactional or account-related messages).
  • Update your contact preferences or personal information. To exercise any of these rights, please contact us at support@papaya.fyi.

6. California Residents Additional Rights (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

  • Right to Know. You may request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes for collection, and the categories of third parties with whom we share it.
  • Right to Delete. You may request deletion of personal information we have collected from you, subject to certain exceptions.
  • Right to Correct. You may request correction of inaccurate personal information we hold about you.
  • Right to Opt Out of Sale or Sharing. Papaya does not sell personal information, nor do we share it for cross-context behavioural advertising purposes.
  • Right to Non-Discrimination. We will not discriminate against you for exercising your rights under CCPA/CPRA. To submit a California privacy request, please contact us at support@papaya.fyi. We may need to verify your identity before processing your request. Authorised agents may submit requests on your behalf with appropriate written authorisation.

7. Children's Privacy

Our Site and Services are not directed to children under the age of 16 and we do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected personal information from a child under 16, we will take steps to delete it promptly. If you believe we may have collected such information, please contact us at support@papaya.fyi.

8. Automated Decision-Making

Papaya does not use personal information it controls to make automated decisions that produce legal or similarly significant effects about individuals. Our platform provides recommendations and optimization suggestions to customers' engineering teams; all decisions remain subject to human review and approval before implementation.

9. Contact Information

If you have questions, concerns, or requests regarding this Policy or our handling of your personal information, please contact us:

Email: support@papaya.fyi

Website: https://papaya.fyi/

10. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where appropriate, by providing additional notice such as an in app notification or email. We encourage you to review this Policy periodically. Your continued use of the Site or Services after changes are posted constitutes your acceptance of the updated Policy.