Privacy Policy
This policy explains what AG-ENTS ("we", "us") collects when you use the app, why, and what happens to it. The short version: we collect what the service needs to run, we don't sell it, we don't run ads or third-party analytics, and deleting your account really deletes your data.
What we collect
- Account — your email address (it is your account) and the display name you choose.
- Sign-in codes — the one-time codes we email you are stored only as cryptographic hashes and expire within 10 minutes. Sessions last up to 180 days of inactivity; using the app extends them.
- Your content — your conversations with your agents, the agents you define, and your settings. This is the product; we store it so your agents work and your history is there when you come back.
- Device and push data — a device identifier, your platform (iOS or Android), and a push-notification token so your agents can reach you. Invalid tokens are removed automatically.
- Server credentials (bring-your-own lane only) — if you connect your own server, the connection credentials you provide are stored encrypted and used only to manage the agent runtime on that server.
- Operational logs and metrics — technical events (requests, errors, timings) that keep the service healthy. These are operational, not behavioral profiling.
We don't collect your contacts, your location, or advertising identifiers, and we don't use third-party analytics.
How we use it
To run AG-ENTS: signing you in, running your agents, storing and delivering your conversations, sending push notifications you'd expect, emailing you sign-in codes and account-critical notices, and keeping the service secure and working. We don't sell your data or share it for advertising.
Who processes data for us
A small set of providers handle specific slices, and each receives only what its job requires:
- Resend delivers sign-in code emails (sent from mail.ag-ents.com).
- Google Firebase Cloud Messaging and Apple Push Notification service deliver push notifications to your device.
- Our server hosting provider runs the machines our gateway and hosted agent runtimes live on.
- AI model providers — your agents' responses are generated by AI models, so the conversation content an agent needs is processed by the model provider configured for that agent.
How long we keep it
Your content stays as long as your account does. Sign-in codes expire in minutes; sessions expire after 180 days of inactivity.
When you delete your account, deletion is immediate and permanent: your account, agents, conversations, and device registrations are hard-deleted, hosted agent runtimes are torn down, and there is no retention window and no undo. Two narrow things outlive deletion: a status token that lets you check the deletion finished (valid up to 24 hours after completion), and a permanent audit record of the deletion itself — metadata only (which account, when, outcome), never your content. We keep that record for security and accountability.
Your rights
You can see your data in the app, change your display name in Settings, and delete your account yourself — in Settings, or as described at ag-ents.com/delete-account. If you're in a jurisdiction that grants you additional rights (such as access, correction, or portability under the GDPR), email us and we'll honor them: support@ag-ents.com.
Children
AG-ENTS is for adults. We don't allow use by anyone under 18 and don't knowingly collect data from children; if we learn we have, we'll delete it.
Changes
If this policy changes materially, we'll tell you in the app or by email before the change takes effect.