Saga Gateway is built on a fundamental principle: We do not want your data.
We DO NOT monitor, store, or have access to:
Your source code or agent logic
Your prompts or LLM context windows
Your internal application state
Your private credentials or API keys (other than the Stripe API key explicitly provided for gateway execution)
The Gateway operates strictly Out-of-Process. It only intercepts the exact JSON-RPC tool calls (e.g., Stripe Charge) that you explicitly route through it. We have zero visibility into what your agent is thinking, how it makes decisions, or what else it is doing.
1. Information We Collect
We collect only the bare minimum required to provide our service:
Account Information: Your email address and Supabase authentication ID.
Billing Information: Stripe Customer IDs to process Pay-As-You-Go usage. Payment details are handled securely by Stripe; we never see your credit card number.
Transaction Logs: The specific MCP tool payloads (arguments and parameters) sent through the Gateway, stored temporarily in your local state machine to facilitate Human-in-the-Loop approvals and rollbacks.
2. How We Use Your Information
We use your information exclusively to:
Provide, maintain, and secure the Saga Gateway service.
Process billing and metering via Stripe.
Provide customer support.
3. Data Security
We implement industry-standard security measures. Your account data is secured by Supabase (SOC2 compliant). We strongly encourage all enterprise users to utilize our BYOC (Bring Your Own Cloud) Docker container, which ensures all transaction logs and MCP payloads never leave your own AWS/GCP VPC.
4. Contact Us
If you have any questions about this Privacy Policy, please contact us.