Privacy Policy, Terms of Service & Acceptable Use
Last Updated: October 2026 | Effective Immediately
1. Scope & Platform Overview
BrowserAutomation.online ("Platform", "we", "us") provides managed cloud headless browser infrastructure, WebSocket remote browser execution, and AI-assisted web automation APIs for software developers and enterprises. By accessing our website or using our APIs, you agree to the practices described in this policy.
2. Data Collection & Ephemeral Browser Isolation
- Account & Billing Data: We collect your developer email address, organization details, and billing metadata processed securely via PCI-DSS compliant payment processors.
- Ephemeral MicroVM Execution: Every browser session runs inside an isolated, single-tenant microVM. When a WebSocket or REST session closes, all memory, DOM cache, and disk state are cryptographically wiped unless you explicitly enable the Persistent Session Vault.
- Telemetry & Session Replay: If debugging logs or video replays are enabled in your workspace, session artifacts are encrypted at rest (AES-256) and automatically purged based on your plan's retention window (24 hours to 30 days).
3. AI Model Processing & Zero-Training Guarantee
When using our AI Agent endpoints (such as /v1/extract or MCP agent workflows), DOM snapshots and extraction prompts are processed via enterprise API agreements with our infrastructure and LLM sub-processors (including Amazon Web Services, Google Cloud Platform, and Anthropic). Customer payloads are never used to train foundational models.
4. Acceptable Use Policy (AUP) & Anti-Abuse
BrowserAutomation.online is built strictly for legitimate quality assurance, enterprise workflow automation, authorized data aggregation, and AI agent execution. Users are strictly prohibited from using the Platform for:
- Credential stuffing, brute-force authentication attacks, or unauthorized intrusion into private computer systems.
- Distributed Denial of Service (DDoS) attacks or intentional degradation of third-party network infrastructure.
- Harvesting sensitive Personally Identifiable Information (PII), financial records, or protected health data in violation of GDPR, CCPA, or applicable laws.
- Automated purchasing bots for unlawful scalping, ad-fraud click farms, or distributing malware.
Violation of this Acceptable Use Policy results in immediate API key revocation and account termination.
5. Security, GDPR & Abuse Reporting
For data deletion requests, GDPR/DPDP compliance inquiries, or to report API abuse, contact our engineering and compliance team: