c30.ai•Legal & Trust Center

Privacy Policy

Learn how C30 collects, uses, and safeguards your personal data, Google account information, and project assets across the C30 Autonomous AI platform.

Last Updated: October 7, 2026

Google API Services User Data Policy Compliance

C30’s use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

When you authenticate using Google OAuth (Sign in with Google), C30 requests access solely to your basic public profile information (name, email address, and avatar image) to create and secure your user account. We do not sell your Google user data, share it with advertising brokers, or use it to train generalized artificial intelligence models without your explicit opt-in consent.

1. Introduction & Overview

Welcome to C30 ("C30", "we", "us", or "our"), accessible at https://c30.ai. C30 is an autonomous AI Company Operating System designed to help founders and entrepreneurs plan, build, and scale businesses using coordinated artificial intelligence agents.

We are committed to protecting your privacy and ensuring transparency in all our data processing practices. This Privacy Policy outlines what information we collect when you visit our website, register for an account, interact with our AI agents, or participate in our Affiliate Program, and how that information is utilized and protected.

2. Information We Collect

A. Information You Provide Directly

  • Account Information: Your email address and full name provided during registration, magic link login, or account setup.
  • Project & Business Content: Project names, industry niches, prompts, task instructions, backlogs, and parameters provided to C30 agents to build and run your business.
  • Payment Information: Billing details, credit card numbers, and transaction records processed securely by our PCI-DSS compliant payment processor (Stripe). C30 does not store raw credit card numbers on its servers.

B. Information Received via Third-Party Integrations

  • Google OAuth: If you choose to log in with Google, we receive your email address, verified identity token, display name, and avatar URL provided by Google’s identity service.
  • Affiliate Tracking Data: When users access C30 via an affiliate referral link, a tracking cookie (c30_ref) records the partner affiliate code for up to 30 days to attribute referral commissions accurately.

C. Technical & Log Data

We automatically collect technical data including IP address, browser type and version, operating system, referrer URL, timestamps of access, and performance telemetry to detect security anomalies, prevent fraud, and optimize server response times.

3. How We Use Your Information

We process your information strictly for legitimate business and operational purposes:

  • To provide, operate, and maintain the C30 Autonomous Platform.
  • To authenticate your identity and safeguard your account against unauthorized access.
  • To orchestrate AI agent tasks (autonomous backlog generation, marketing copy, code changes, and night shift execution).
  • To calculate and disburse referral commissions to affiliates based on valid referral cookies.
  • To bill subscriptions and credit top-ups through Stripe.
  • To communicate critical system alerts, maintenance notices, and security updates.
  • To enforce compliance with our Terms of Service and applicable legal regulations.

4. Sharing and Disclosure of Information

We never sell, rent, or trade your personal data to third parties. We only share information with trusted third-party service providers bound by strict confidentiality and data protection agreements:

  • Database & Authentication: Supabase (PostgreSQL encrypted storage and authentication services).
  • Payment Processing: Stripe (PCI-DSS compliant payment processing).
  • Cloud Infrastructure: Vercel and Google Cloud Platform for hosting, DNS routing, and edge computing.
  • AI Providers: Enterprise LLM APIs (such as Google Gemini) utilized to execute user-requested prompts under enterprise zero-data-retention and non-training terms.

5. Cookies and Tracking Technologies

C30 uses cookies and local storage tokens for critical authentication, security, and affiliate tracking. For comprehensive details regarding cookie types, purposes, and how to manage them, please review our dedicated Cookie Policy.

6. Data Security & Storage

We employ industry-standard administrative, physical, and technical safeguards to protect your personal information against accidental loss, unauthorized access, alteration, or disclosure. All data in transit is encrypted using modern TLS 1.3 encryption protocols, and sensitive tokens are salted and hashed.

7. Your Privacy Rights (GDPR & CCPA)

Depending on your jurisdiction, you have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete information.
  • Erasure: Request the deletion of your account and associated project data ("Right to be Forgotten").
  • Data Portability: Request export of your project records and configurations in a standard machine-readable format.
  • Withdraw Consent: Revoke consent for processing at any time without affecting previous lawful processing.

To exercise any of these rights, contact our Data Protection Officer at privacy@c30.ai.

8. Contact Us

If you have questions, feedback, or concerns regarding this Privacy Policy or our security practices, please reach out to us at:

Application: C30 (c30.ai)