Privacy Policy

Who we are

AgentMode is run by Artificial Intelligence Labs S.L. (CIF B56750268), C/ Manuel García Conde, 3, 1º Izda., 33009 Oviedo, Asturias, Spain. We are the controller of your personal data under the EU General Data Protection Regulation (GDPR). For anything about your data, write to [email protected].

What we keep, and why

To run your agent we store your email address, your agent’s settings and look, your conversations, the memories, goals and files your agent keeps, the files you send it, its activity record, and your usage and billing history. We process this to provide the service you signed up for (GDPR art. 6.1.b), to keep it secure (art. 6.1.f), and to keep invoices for as long as Spanish tax law requires (art. 6.1.c).

Your conversations can contain personal information, including information from the files and apps you choose to use. Relevant content is sent to the AI and other service providers needed to carry out your request. Sign-in uses cookies and native secure storage to maintain your session.

Usage analytics

With your permission, PostHog receives page or screen visits, feature actions, app version, errors, and model usage metadata such as tokens, latency and estimated cost. Signed-in activity is linked using your account identifier. We exclude conversation content, files, prompts, responses, and tool arguments and results. Session recording is disabled.

You can allow or decline analytics when asked, and change your choice in Account settings on web and desktop or General settings on mobile. Declining does not limit the service. Your choice is stored on your device and, when signed in, in our account cache for up to a year; losing or expiring that record stops server collection until a choice is synchronized again. We separately maintain operational security, reliability and billing records needed to run the service.

Account deletion requests removal of the associated PostHog person, events and recordings. Provider deletion runs asynchronously and is subject to its retention and deletion processes.

Where it lives

AgentMode uses hosted databases and services for account and agent records, with a separate workspace for each customer’s files and commands. The agent service is shared across customers and uses account-based access controls. Connections to our public service use HTTPS.

AI requests pass through OpenRouter to the selected model provider. They may contain personal information from your conversation and connected apps. Retention, logging and use of requests depend on the provider and the settings that apply to the request. The content of a request can identify you or other people. See OpenRouter’s data handling documentation. External services may process data outside the EU, separately from where AgentMode hosts its own databases and workspaces.

Who processes it for us

Authentication forms use Cloudflare Turnstile to distinguish people from automated requests. Cloudflare processes browser and device signals for this security check, as described in its Turnstile Privacy Addendum.

  • PostHogOptional usage analytics and error reports, linked to an account identifier when signed in; conversation and file content are excluded
  • HetznerHosting the platform, agent workspaces and stored data
  • SupabaseSign-in, account identifiers and account emails
  • OpenRouter and model providersProcessing the conversation, file content, memories and tool results needed for AI responses and memory search
  • StripeWeb and desktop payments, subscription records and invoices
  • RevenueCatMobile purchase validation, subscription status and restoration, linked to your AgentMode user ID
  • ComposioAuthorization and actions for the apps you choose to connect
  • Brave SearchProcessing the search queries your agent submits
  • Expo and device push servicesDelivering enabled notifications using device tokens and notification content; browser delivery uses the browser’s push provider
  • CloudflareWeb delivery and browser and device signals used to protect sign-in from automated abuse

RevenueCat receives your AgentMode account identifier and purchase information such as product, transaction and subscription status. We use that information to verify access, restore purchases and apply credits. This identifier is linked to your account; it is not an anonymous purchase profile. RevenueCat describes its processing in its Privacy Policy and Data Processing Addendum.

Connected apps and any custom connections you configure receive the data needed for the actions you request. Disconnecting an app prevents further use of that connection; it does not erase data already held by the app or its provider. Stripe processes card payments on web and desktop, and Apple processes App Store payments. We do not receive your full payment card number from these providers.

How long we keep it

We keep account and agent data to provide the service. Deleting your agent from Settings requests cleanup of its workspace and associated agent records. This work can run in the background and is not an assurance of immediate erasure. It does not delete your sign-in account or cancel an App Store subscription; manage that subscription through Apple.

To delete your sign-in account as well, choose Delete account in your account settings. This is available before starting a trial. Further account use is blocked while cleanup removes your agent data and workspace, disconnects your apps and requests deletion of billing-provider profiles. The deletion screen shows progress and lets you retry if cleanup fails. Web subscriptions are canceled during cleanup; App Store subscriptions must be canceled separately through Apple.

Billing, purchase-validation and security records may remain where needed to reconcile payments, prevent duplicate credits, resolve disputes or meet legal obligations. A minimal account-deletion record prevents old sessions from restoring access. Temporary authorization caches expire separately, and backup copies and service providers have their own retention and deletion processes. Billing-provider profile deletion can continue asynchronously after AgentMode confirms account deletion. For a data request or information about retention, write to [email protected].

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. Write to [email protected] and we’ll answer within a month. If you’re not happy with our answer, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es), or the authority where you live.

Changes

If we change this policy in a way that matters, we’ll tell you before it takes effect.