Privacy Policy

What we collect

Account data: your name and email address, and a sign-in record handled by Firebase Authentication (Google's sign-in service). If you sign in with Google, we receive your name, email and profile picture from Google.

Your content: the sources you give your agents — uploaded files (PDF, DOCX, text, Markdown, HTML, CSV, JSON, XML), pasted text, URLs and sitemap pages we fetch for you — plus your agents' settings and the chat conversations held with them.

Usage data: message counts and similar operational records we need to enforce plan limits, show you analytics, and keep the service reliable. AgentoGPT also uses Firebase Analytics in the browser to understand which pages are used.

Payment data: subscriptions are processed by Stripe. Your card details go directly to Stripe and are never stored on our servers; we keep your Stripe customer and subscription identifiers and your plan status.

How your data is used

Your sources are indexed per project and retrieved only to answer questions put to that project — by you, your team, your widget visitors, your share-page visitors, or callers using your API keys, according to the access you configure. Your content is never used to train shared models and is never sold.

When an agent answers, the question and the relevant excerpts of your sources are sent to our AI model provider to generate the reply. Account data is used to operate your account, enforce plan limits, send essential service messages, and provide support.

Who processes data for us

We rely on a small set of processors: Firebase (Google) for authentication and product analytics, Stripe for payments, and our AI gateway provider for generating answers. Each receives only the data needed for its part of the service.

Cookies

We use the cookies needed to keep you signed in and to keep the app secure. Analytics cookies from Firebase Analytics help us understand aggregate usage. We do not use advertising cookies.

Retention and your rights

Your data is kept while your account exists. From your Profile page you can export your data and delete your account at any time; deleting your account removes your profile, agents, sources and conversations, apart from records we must keep for billing and legal reasons (for example Stripe's transaction records).

Security

Access to agents and sources is controlled per user with project-level roles (Admin, Editor, Viewer), enforced across the app, the embed widget and the API. API keys are scoped and revocable. Traffic to AgentoGPT is served over HTTPS. No system is perfectly secure, but we design and review access controls so that one customer's content is never retrievable by another.

Data processing addendum

If your organisation needs a Data Processing Addendum (DPA) covering AgentoGPT's processing of your content, contact us through the Support page in your account or the contact options on the pricing page and we will arrange one.

Changes to this policy

If we change this policy materially, we will update this page and, where appropriate, notify account holders through the app or by email. The date at the top of this page shows when it last changed.

Contact

Privacy questions or requests: reach us through the Support page inside your account, or via the contact options on the pricing page.