Privacy & Data Protection Policy - AgentM

1. Introduction

This Privacy & Data Protection Policy ("Policy") explains how Agent M LLC ("AgentM," "we," "our," or "us"), a Delaware limited liability company, collects, uses, discloses, and protects personal data in connection with the use of AgentM and associated Services (the "Services").

We are committed to protecting your privacy and ensuring compliance with applicable privacy and data protection laws, including U.S. regulations, and, where relevant, international standards such as Brazil's LGPD and the UK Data Protection Act.

By accessing or using the Services, you consent to the practices described in this Policy.

2. Definitions

• Personal Data: Any information relating to an identified or identifiable individual.
• Processing: Any operation performed on Personal Data (e.g., collection, storage, use, transfer).
• User Data: Data stored in your own database or local system and queried via the AgentM app.
• Third-Party Processors: External services that process data on our behalf (e.g., Stripe, OpenAI).

3. Data We Collect

We collect the following types of data:

a. Account Data

• Email address
• Name and profile data provided via Google Login or similar OAuth providers
• Login timestamps
• Account status and subscription level

b. Usage Data

• Application performance metrics and error logs
• Anonymous analytics (e.g., Google Analytics)
• Metadata about interactions (e.g., number of prompts sent)

c. Payment Data

• Payment transaction information processed by Stripe or other PCI-compliant processors
• Billing address and subscription history

Note: We do not store credit card numbers on our servers.

d. AI Interaction Data

• Natural language prompts sent to third-party AI processors (e.g., OpenAI, Anthropic)
• These are not stored on our servers but may be retained by processors according to their own data policies

e. User Database Content

Important: We do not upload, store, or access the content of your local databases. Your database remains on your local device.

4. How We Use Your Data

We use collected data to:

• Provide and improve the Services
• Process subscriptions and payments
• Authenticate users and maintain account security
• Send service-related notifications (e.g., updates, security alerts)
• Analyze app performance and usage patterns
• Comply with legal obligations

5. Data Sharing

We do not sell or rent your personal data. We may share data with:

• Third-Party Processors: Stripe (payments), Google (OAuth login, analytics), OpenAI/Anthropic (AI processing)
• Legal Authorities: If required by law or to protect our legal rights
• Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred

6. Cookies & Tracking

We use cookies and similar technologies for:

• Session management (authentication)
• Analytics (Google Analytics)
• User preferences (theme, language)

You can manage cookies through your browser settings. Disabling cookies may affect the functionality of the Services. For more details, see our Cookie Policy.

7. Data Security

We implement commercially reasonable security measures, including:

• Encryption in transit (HTTPS/TLS)
• Secure API communications
• Access controls and authentication mechanisms
• Regular security assessments

However, no system is 100% secure. You are responsible for securing access to your local data and devices in accordance with applicable law.

8. Retention of Data

We retain:

• Account and billing data: For the life of your account + 3 years (for compliance purposes)
• AI prompt logs: Retained by third-party processors per their own retention schedules
• Usage analytics: For up to 24 months in aggregate format

You may request data deletion at any time via our contact form.

9. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of your data
• Rectification: Correct inaccurate data
• Deletion: Request account or data removal
• Restriction: Limit how we use your data
• Objection: Opt out of certain processing, like analytics
• Portability: Obtain a structured copy of your personal data

To exercise any rights, contact us at the address below.

10. Children's Privacy

The Services are not intended for children under the age of 13. If you are 13-17, you may use the Services only with parental or legal guardian consent.

We do not knowingly collect data from children under 13. If we become aware of such collection, we will take steps to delete it.

11. Security

We implement commercially reasonable security measures to protect your personal information, including encryption in transit, secure API communications, and anti-abuse filters.

No system can guarantee 100% security; you are responsible for securing access to your local data and devices.

12. Changes to This Policy

We may update this Policy from time to time. Significant changes will be communicated through email or app notifications. The most current version will always be available on our website.

13. Contact Information

For privacy-related inquiries: