Privacy Policy

1. Who We Are

AGNT GG, Inc. ("AGNT," "we," "us") operates the website agnt.gg and the AGNT desktop application — an automation platform that lets you build and run AI-powered workflows connecting the tools you already use, on your own computer or with AGNT's optional cloud services. This policy explains what information we collect, how we use it, and the choices you have. It applies to the AGNT website, the AGNT desktop application, and the AGNT API.

2. Where Your Data Lives

On your computer, by default

The AGNT application runs on your own computer. When a workflow you build there reads an email, edits a spreadsheet, or uploads a file, that request is made from your device directly to the connected service, and AGNT's servers do not receive, store, or process that content.

In the cloud, when you choose it

AGNT also offers optional cloud services. When you use one, the data it needs is sent to and processed on our servers. They are:

• AGNT models (such as AGNT Flash) — your prompts pass through our model service to the model that answers them. We keep usage records (tokens and cost) for billing, not the text of your prompts or responses.
• Web search — your search request is processed by our search service and its search provider. We keep a billing record for each search, not your search terms.
• Web page reading — the address you send is fetched and converted on our servers. Page reading inside the desktop app runs in your own browser and does not use this service.
• Code sandboxes — code you run in an AGNT sandbox runs on our servers.
• Hosted webhooks — events sent to an AGNT webhook address are received on our servers and passed to your automations.
• Email inboxes — messages sent and received through an AGNT inbox are stored so that you can read and manage them.
• Cloud instances and shared workspaces — automations you run on an AGNT cloud instance run on our servers, and anything you share with your team is stored there.

Your API keys and sign-ins

• Cloud storage of your keys is optional. You can keep every API key on your own machine, in environment variables or in the app's local encrypted store, and AGNT will use them from there.
• Cloud key sync is a feature of paid cloud plans: your keys and sign-in tokens are stored encrypted on our servers and refreshed automatically, so your connections stay live even while your computer is off or offline.
• Some connections, such as Google, are set up through our servers, which store the resulting sign-in tokens encrypted (see section 4).

Beyond the cloud services you choose, our servers handle account authentication, subscription status, the marketplace, and brokering OAuth connections to third-party services.

3. Information We Collect

Information you provide

• Account information — email address, name, and password (stored as a salted hash) when you create an account.
• Payment information — processed entirely by Stripe. We receive only your subscription status and plan type, never your card details.
• Communications — messages you send us for support or feedback.

Information collected automatically

• Website analytics — we use first-party, self-hosted analytics on agnt.gg (page views, referrers, approximate location from IP). We also use Google Analytics to measure aggregate site traffic. Its advertising features, ad personalisation and Google signals are turned off, and it does not load if your browser sends Do Not Track. No third-party ad trackers.
• Service logs — standard server logs (IP address, request path, timestamp) for security and debugging, retained on a rolling basis.

Information that stays on your device by default

• Your workflows, agents, tools, and their configurations.
• Content retrieved from or sent to connected services during workflow execution.
• Files, images, videos, and documents your automations generate.
• These move to our servers only when you use a cloud service that needs them, as described in section 2.

4. Google User Data

AGNT lets you connect your Google Account so that automations you build and run can work with your Google services. This section describes exactly how that data is handled.

How access works

• You connect your Google Account explicitly, through Google's OAuth consent screen, and you choose which permissions to grant.
• OAuth tokens are stored securely in AGNT's encrypted credential vault and are used solely to make the API calls your automations direct.
• Google user data (email content, files, documents, events, media) is accessed only at the moment a workflow or assistant action you initiate needs it. It is processed on your device — or, if you run that automation on an AGNT cloud instance, on that instance — and it is not otherwise transmitted to or stored on AGNT's servers.
• Disconnecting Google in the app deletes the stored tokens. You can also revoke AGNT's access at any time from your Google Account permissions page.

What each permission is used for

Permission (scope)	What AGNT uses it for
userinfo.email, userinfo.profile, openid	Identify which Google Account is connected and display it to you in the app.
gmail.modify	Read, send, label, and organize email — only when your workflows do so (e.g., "summarize new invoices," "send this report as an email").
drive	List, read, create, move, and share files your automations target (e.g., "save the generated report to this folder"). Broad access is required because workflows operate on files you choose at runtime, which per-file scopes cannot support.
spreadsheets	Read, write, and append spreadsheet data in your workflows (e.g., "log each form submission as a row").
documents	Create, read, and edit documents in your workflows (e.g., "draft this week's report as a Doc").
presentations	Create and edit slide decks in your workflows.
calendar	List, create, and update events, check availability, and attach Google Meet links to meetings your workflows schedule.
meetings.space.created, meetings.space.readonly	Create Google Meet spaces and retrieve meeting artifacts (recordings, transcripts) for meetings your workflows manage.
youtube, youtube.upload, youtube.force-ssl, youtube.readonly	Upload and manage videos and channel content when your workflows publish to YouTube.

What we never do with Google user data

• We do not sell it or transfer it to data brokers or advertising platforms.
• We do not use it for advertising of any kind.
• We do not use it to develop or train generalized artificial-intelligence or machine-learning models.
• We do not allow humans to read it, except (a) with your explicit consent for a specific case, (b) as necessary for security investigation or abuse prevention, or (c) where required by law.
• We do not transfer it to third parties, except as necessary to provide or improve user-facing features you invoke, to comply with applicable law, or as part of a merger or acquisition with prior notice to you.

Note: if you build a workflow that sends your Google data somewhere (for example, "forward this email to Slack" or "summarize this document with an AI model you selected"), that transfer happens because you designed the automation to do it, from your device, under your control.

5. How We Use Information

• Provide, maintain, and improve the AGNT platform.
• Authenticate you and manage your subscription.
• Respond to support requests.
• Send transactional emails (receipts, security notices) and, with your consent, product updates. You can unsubscribe from non-essential email at any time.
• Protect against fraud, abuse, and security threats.

6. Sharing

We do not sell personal information. We share it only with:

• Service providers who help us run AGNT — payment processing (Stripe), infrastructure hosting (DigitalOcean and Hetzner), website traffic measurement (Google Analytics), and email delivery — each bound to use data only to provide their service to us.
• Providers behind the cloud services you use — for example, the AI model that answers a prompt you send to an AGNT model, or the search provider that answers a web search — only to the extent needed to provide that service.
• Legal authorities, if required by law, subpoena, or to protect the rights, safety, or property of AGNT or others.
• A successor entity, in the event of a merger or acquisition, with prior notice to you.

7. Data Retention & Deletion

• Account data is retained while your account is active.
• Disconnecting a third-party service deletes its stored OAuth tokens.
• Content you keep in a cloud service, such as messages in an AGNT inbox, is stored while your account is active and is deleted with your account.
• You may request deletion of your account and associated personal data at any time by emailing legal@agnt.gg. We complete deletion requests within 30 days, except where retention is required by law (e.g., tax records).
• Data on your own device is yours — uninstalling AGNT or deleting its data folder removes it.

8. Security

We use industry-standard measures to protect your information: TLS encryption for all traffic, encrypted credential storage, salted password hashing, and access controls on our infrastructure. No method of transmission or storage is 100% secure, but we work to protect your data and will notify you of any breach affecting your personal information as required by law.

9. Children

AGNT is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be announced on this page with an updated "Last updated" date, and — for significant changes affecting how we handle your data — by email or in-app notice.

11. Contact

Questions, requests, or concerns about privacy:

• Email: legal@agnt.gg
• GitHub: github.com/agnt-gg/agnt

12. Trademarks

“AGNT,” “AGNT Labs,” “AGNT.gg,” and “Annie” (our AI companion and mascot), together with the AGNT and Annie logos and related names and marks, are trademarks of AGNT GG, Inc. All rights reserved. You may not use these marks without our prior written permission.