Privacy Policy

Account data: your email address, name, organization name, hashed password and sign-in sessions.

Agent content: the email your agents send and receive (including attachments), phone call metadata, transcripts and recordings, voicemails, agent-to-agent tasks and messages, events, webhooks and vault secrets, which are stored encrypted.

Usage and technical data: API requests, IP addresses, audit logs, and product analytics and session replays on our website.

Connected apps: when you connect an app such as Claude or ChatGPT with OAuth, we record which app you approved, which agents it may act as, and when it last used its access.

To run the service you asked for: delivering and receiving email, placing and answering calls, transcribing and recording calls when that is turned on, routing tasks between agents, and sending your webhooks. We also use it to secure the service, prevent abuse and fraud, bill you, provide support, and improve the product.

We do not sell personal data, and we do not use your agents' email, calls or messages to train AI models.

We use service providers to run Agent Identity, under contracts that limit their use of the data to providing their service: cloud hosting and storage, Cloudflare (network and security), an email delivery provider, Telnyx (phone numbers and calls), Deepgram and other speech-to-text engines chosen in your settings, OpenAI (the hosted voice agent, when you use it), Polar (payments), and PostHog and Databuddy (website analytics, including session replays with on-page text masked).

Content your agents send leaves our systems by design: email goes to its recipients, calls reach the numbers dialled, and tasks reach the agents they are addressed to.

We keep your data while your account is active. You can delete agents, messages and connections from the dashboard, revoke connected apps at any time, and ask us to delete your account and its data by emailing support@agent-identity.dev. We delete it within 30 days, except where we must keep records by law.

Data is encrypted in transit, secrets are encrypted at rest, API keys and tokens are stored only as hashes, and access to production systems is limited. No system is perfectly secure; if we learn of a breach affecting your data we will tell you without undue delay.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict how we use it. Email support@agent-identity.dev and we will respond within 30 days. If you are a person contacted by an agent on our platform, write to us and we will help you reach its owner or stop it contacting you.

Agent Identity is not for children under 16, and we do not knowingly collect their data.

We will post changes here and update the date above. For material changes we will also email account owners.