Privacy Policy

1. Overview

This policy explains how Agently Inc. (“Agently”, “we”, “us”) handles personal information when you use the Agently platform, including the AgentFlow dashboard and related websites and services (the “Service”). In short: we collect what we need to run the product, we don’t sell your data, and the content you create is shared only with the people you choose.

2. Information we collect

• Account information. Your email address and login credentials, and a session cookie that keeps you signed in. Invites are tied to the recipient’s email address.
• Content. The documents, dashboards, chat messages, agent configurations, and automations you create in the Service.
• Connected-service credentials. API keys and account authorizations (for example a Teachworks API key or Google account authorization) that you provide so the Service can fetch data or act on your behalf. Data retrieved from connected services is processed to render your documents and run your automations.
• Waitlist information. The email address you submit if you join the waitlist on our landing page.
• Log and usage data. Standard server logs (such as IP address, timestamps, and requested pages) and operational records like automation run history, used for security and debugging.

We do not use third-party advertising trackers, and the only cookie we set is the session cookie required to sign you in.

3. How we use information

• to provide the Service: store and render your documents, run your agents and automations, and deliver shares and invites;
• to operate connected integrations you have authorized, strictly on your instructions;
• to secure the Service, prevent abuse, and debug problems;
• to communicate with you about the Service, including invite and account emails;
• to comply with legal obligations.

4. AI processing

Features like build chat and agent workers send relevant content — your prompts, the document being edited, and data the document references — to our AI model provider (Anthropic) to generate responses. We use commercial API terms under which submitted content is not used to train the provider’s models. We do not use your Content to train models of our own.

5. When information is shared

• With people you choose. Documents are private by default and visible only to people you invite or share with. Recipients see rendered document data, never your connected credentials. Credentials are also stripped when a shared document is copied.
• With service providers. We use infrastructure subprocessors to run the Service — currently hosting and compute (Vercel, Railway), database and email delivery (Supabase and our managed Postgres provider), and AI processing (Anthropic). They process data only to provide their services to us.
• For legal reasons. If required by law, or to protect the rights, safety, or integrity of the Service.

We do not sell personal information, and we do not share it for advertising.

6. Google user data

If you connect a Google account, we access only the data needed for the features you enable, use it solely to provide those features to you, and do not transfer it to third parties except as necessary to provide those features, comply with law, or as part of a merger or acquisition with equivalent protections. We never use Google user data for advertising. You can revoke our access at any time from your Google account’s security settings.

7. Retention and deletion

We keep your information while your account is active. Documents you delete are removed from the Service along with their companion records (such as build-chat history and pending invites). To delete your account and associated data, or to request an export, email paceyzz33@gmail.com — we will respond within 30 days. Server logs and backups age out on a rolling basis.

8. Security

Traffic to the Service is encrypted in transit. Connected-service credentials are stored encrypted and used only server-side; they are never exposed to viewers of shared documents. Access to production systems is restricted. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you as required by law.

9. Your rights

Depending on where you live (for example under the GDPR or UK GDPR), you may have rights to access, correct, export, restrict, or delete your personal information, and to object to certain processing. You can exercise these rights by emailing paceyzz33@gmail.com. If you are in the EEA or UK you also have the right to complain to your local supervisory authority.

10. Children

The Service is not directed to children under 13 (or the age of digital consent where you live), and we do not knowingly collect their data. If you believe a child has provided us personal information, contact us and we will delete it.

11. Changes and contact

We may update this policy as the Service evolves; material changes will be announced in the app or by email, and the “Last updated” date above will change. Questions or requests: paceyzz33@gmail.com. See also our Terms of Service.