Privacy Policy

1. Who We Are

AGNT GG, Inc. ("AGNT," "we," "us") operates the website agnt.gg and the AGNT desktop application — a local-first automation platform that lets you build and run AI-powered workflows connecting the tools you already use. This policy explains what information we collect, how we use it, and the choices you have. It applies to the AGNT website, the AGNT desktop application, and the AGNT API.

2. The Local-First Architecture

AGNT is built differently from typical cloud automation platforms, and it matters for your privacy: the AGNT application runs on your own computer. When a workflow you build reads an email, edits a spreadsheet, or uploads a file, that request is made from your device directly to the connected service. The content of your emails, files, documents, calendars, and media is transmitted between your device and the service provider — AGNT's servers do not receive, store, or process that content.

Our servers handle only what genuinely requires a server: account authentication, subscription status, the marketplace, and brokering OAuth connections to third-party services.

3. Information We Collect

Information you provide

• Account information — email address, name, and password (stored as a salted hash) when you create an account.
• Payment information — processed entirely by Stripe. We receive only your subscription status and plan type, never your card details.
• Communications — messages you send us for support or feedback.

Information collected automatically

• Website analytics — we use first-party, self-hosted analytics on agnt.gg (page views, referrers, approximate location from IP). No third-party ad trackers.
• Service logs — standard server logs (IP address, request path, timestamp) for security and debugging, retained on a rolling basis.

Information that stays on your device

• Your workflows, agents, tools, and their configurations.
• Content retrieved from or sent to connected services during workflow execution.
• Files, images, videos, and documents your automations generate.

4. Google User Data

AGNT lets you connect your Google Account so that automations you build and run can work with your Google services. This section describes exactly how that data is handled.

How access works

• You connect your Google Account explicitly, through Google's OAuth consent screen, and you choose which permissions to grant.
• OAuth tokens are stored securely in AGNT's encrypted credential vault and are used solely to make the API calls your automations direct.
• Google user data (email content, files, documents, events, media) is accessed only at the moment a workflow or assistant action you initiate needs it, is processed on your device, and is not transmitted to or stored on AGNT's servers.
• Disconnecting Google in the app deletes the stored tokens. You can also revoke AGNT's access at any time from your Google Account permissions page.

What each permission is used for

Permission (scope)	What AGNT uses it for
userinfo.email, userinfo.profile, openid	Identify which Google Account is connected and display it to you in the app.
gmail.modify	Read, send, label, and organize email — only when your workflows do so (e.g., "summarize new invoices," "send this report as an email").
drive	List, read, create, move, and share files your automations target (e.g., "save the generated report to this folder"). Broad access is required because workflows operate on files you choose at runtime, which per-file scopes cannot support.
spreadsheets	Read, write, and append spreadsheet data in your workflows (e.g., "log each form submission as a row").
documents	Create, read, and edit documents in your workflows (e.g., "draft this week's report as a Doc").
presentations	Create and edit slide decks in your workflows.
calendar	List, create, and update events, check availability, and attach Google Meet links to meetings your workflows schedule.
meetings.space.created, meetings.space.readonly	Create Google Meet spaces and retrieve meeting artifacts (recordings, transcripts) for meetings your workflows manage.
youtube, youtube.upload, youtube.force-ssl, youtube.readonly	Upload and manage videos and channel content when your workflows publish to YouTube.

What we never do with Google user data

• We do not sell it or transfer it to data brokers or advertising platforms.
• We do not use it for advertising of any kind.
• We do not use it to develop or train generalized artificial-intelligence or machine-learning models.
• We do not allow humans to read it, except (a) with your explicit consent for a specific case, (b) as necessary for security investigation or abuse prevention, or (c) where required by law.
• We do not transfer it to third parties, except as necessary to provide or improve user-facing features you invoke, to comply with applicable law, or as part of a merger or acquisition with prior notice to you.

Note: if you build a workflow that sends your Google data somewhere (for example, "forward this email to Slack" or "summarize this document with an AI model you selected"), that transfer happens because you designed the automation to do it, from your device, under your control.

5. How We Use Information

• Provide, maintain, and improve the AGNT platform.
• Authenticate you and manage your subscription.
• Respond to support requests.
• Send transactional emails (receipts, security notices) and, with your consent, product updates. You can unsubscribe from non-essential email at any time.
• Protect against fraud, abuse, and security threats.

6. Sharing

We do not sell personal information. We share it only with:

• Service providers who help us run AGNT — payment processing (Stripe), infrastructure hosting (DigitalOcean), and email delivery — each bound to use data only to provide their service to us.
• Legal authorities, if required by law, subpoena, or to protect the rights, safety, or property of AGNT or others.
• A successor entity, in the event of a merger or acquisition, with prior notice to you.

7. Data Retention & Deletion

• Account data is retained while your account is active.
• Disconnecting a third-party service deletes its stored OAuth tokens.
• You may request deletion of your account and associated personal data at any time by emailing legal@agnt.gg. We complete deletion requests within 30 days, except where retention is required by law (e.g., tax records).
• Data on your own device is yours — uninstalling AGNT or deleting its data folder removes it.

8. Security

We use industry-standard measures to protect your information: TLS encryption for all traffic, encrypted credential storage, salted password hashing, and access controls on our infrastructure. No method of transmission or storage is 100% secure, but we work to protect your data and will notify you of any breach affecting your personal information as required by law.

9. Children

AGNT is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be announced on this page with an updated "Last updated" date, and — for significant changes affecting how we handle your data — by email or in-app notice.

11. Contact

Questions, requests, or concerns about privacy:

• Email: legal@agnt.gg
• GitHub: github.com/agnt-gg/agnt

12. Trademarks

“AGNT,” “AGNT Labs,” “AGNT.gg,” and “Annie” (our AI companion and mascot), together with the AGNT and Annie logos and related names and marks, are trademarks of AGNT GG, Inc. All rights reserved. You may not use these marks without our prior written permission.