Privacy Policy

Effective: April 22, 2026

The short version: The Wisdom Layer SDK is self-hosted on your infrastructure. Our service does not receive or store your agent memory, directives, or conversation content. The data we process is what you provide to create and manage your account, plus periodic license-validation pings (described below).

1. Who We Are

Rhatigan Labs LLC ("we", "us") provides the Wisdom Layer SDK, a Python library for AI agent memory and reflection. Our website is wisdomlayer.ai.

2. What We Collect

We collect only the minimum data needed to operate the service:

Account data:

Email address (provided at signup)
Subscription tier and billing status
License key metadata (key prefix, tier, creation date, last validation)
ToS acceptance timestamp

Billing data:

Processed by Stripe. We do not store credit card numbers, CVVs, or bank account details. See Stripe's Privacy Policy.

License validation logs:

IP address and timestamp of license validation requests (retained 90 days)
Used solely for abuse detection and rate limiting

3. What We Do NOT Collect

Our service does not receive or store: agent memories, directives, dream journals, provenance logs, conversation content, embeddings, user prompts, or LLM responses. The SDK runs on your hardware; agent data stays on your hardware.

Note on cloud LLM adapters: if you configure the SDK to use a cloud LLM provider (Anthropic, OpenAI, Google, etc.), prompts and responses traverse that provider per their terms. The Wisdom Layer service does not see, route, or duplicate that traffic.

4. How We Use Your Data

Account management and license key provisioning
Billing and payment processing (via Stripe)
Product announcements and security notifications (email, opt-out available)
Abuse prevention and rate limiting

5. Data Sharing

We share data only with:

Stripe — payment processing
Supabase — account database hosting (US region)

We do not sell, rent, or trade your personal information.

6. Data Retention

Account data: retained while your account is active, plus 30 days after deletion
Validation logs: 90 days
Billing records: as required by law (typically 7 years)

7. Your Rights

You may:

Access your account data by emailing us
Correct inaccurate information
Delete your account (email jeff@rhatigan.ai)
Export your account data
Opt out of non-essential communications

For GDPR data subject requests regarding data processed by the SDK (which runs on your infrastructure), see the SDK documentation on memory.forget_subject() and memory.export_subject().

8. Security

License validation API uses HTTPS exclusively
Database hosted on Supabase with encryption at rest
No plaintext secrets in the SDK; all keys are environment variables
Stripe webhook signatures verified on every event

9. Cookies & Third-Party Embeds

wisdomlayer.ai does not run analytics, advertising, or session-replay services, and we do not set first-party tracking cookies. The site loads a small number of third-party assets that may set their own cookies under their respective privacy policies:

Beehiiv — newsletter subscription form (embedded on the homepage and docs). See Beehiiv's Privacy Policy.
img.shields.io — PyPI version badge (server-rendered, no client JS).
Stripe — on the signup & account flows only, for payment processing. See Stripe's Privacy Policy.

Outbound links to GitHub, PyPI, Substack, and LinkedIn open in new tabs and are subject to those services' own policies.

10. Children

The Software is not directed at children under 13. We do not knowingly collect data from children.

11. Changes

We may update this policy. Material changes will be communicated via email. The effective date at the top reflects the latest revision.

12. Contact

Questions or requests? Email jeff@rhatigan.ai.