Last updated: July 15, 2026
Aqua Blue is operated by Aqua GK. This policy explains how we collect, use, store, and delete information when you use Aqua Blue and connect third-party services.
We collect account information such as email address and authentication identifiers, workspace and AI employee configuration, instructions, inputs and outputs, work history, uploaded files, connected account credentials or OAuth tokens, support messages, and basic technical logs. When you connect a third-party service, we may process the data made available through the permissions you approve, such as records, messages, files, orders, products, customers, spreadsheets, calendar events, or other content needed to perform the work you configure.
We use information to authenticate users, provide the AI team service, connect third-party services, perform user-configured work, troubleshoot issues, provide support, secure the service, prevent abuse, and comply with legal and platform obligations. We do not sell user, customer, or connected service data.
Aqua Blue accesses connected services only after you authorize the connection or provide the required credentials, and only within the permissions approved for that connection. Connected service data is used to perform the work you configure, such as reading, transforming, creating, or updating data in the services you choose. We do not use connected service data for advertising.
We may share information with service providers that help operate Aqua Blue, such as hosting, databases, email delivery, logging, payment, analytics, and AI or automation infrastructure. These providers are used only as needed to deliver and protect the service.
Aqua Blue uses the providers below to process customer data on our behalf. We use them only as needed to operate, secure, and support the service.
We update this list when we add or replace a subprocessor that may process customer data. For questions about subprocessors or data processing, contact [email protected].
We keep account, AI employee, credential, and work history data while needed to provide the service, meet operational requirements, or comply with legal obligations. You can request deletion of your account or connected service data by contacting us. When a connected service sends an uninstall, revocation, data deletion, or account deletion notice, we process it according to that service's requirements and delete or anonymize related data where required.
We use layered safeguards to protect information entrusted to Aqua Blue. Sensitive connection data, including credentials and access tokens, is encrypted at rest. Access to team data is limited to authorized team members, and connected services are used only within the permissions granted for each integration. We also use time-limited authorization flows, session protections, and provider verification checks where supported. No online service can guarantee absolute security, but we design Aqua Blue to limit access, protect credentials, and reduce the risk of unauthorized use.
Aqua Blue and its service providers may process information in countries outside the merchant's country of residence. Where required, we rely on appropriate safeguards for international transfers.
For privacy questions or requests, contact us at [email protected].