Privacy Policy
Last updated
AgentPrime is a personal assistant you talk to by text. To help you, it handles your messages and, when you connect them, information in your accounts. This policy explains what we collect, how we use it, who else is involved, how long we keep it and the choices you have.
It covers agentprimehq.com, the AgentPrime web app, and your conversations with AgentPrime over iMessage, SMS and any other channel you use to reach it. "AgentPrime", "we" and "us" mean the operator of AgentPrime.
Information we collect
- Account details. Your name, what you'd like AgentPrime to call you, your phone number and email address, your time zone and your settings. If you sign in with Google, we receive your name and email address from Google. If you add a passkey, we store its public key, never your device's private key.
- Messages. What you send AgentPrime and what it sends you, on every channel, with the number or account a message came from and whether it was delivered.
- Information from accounts you connect. When you connect an account such as Google Workspace, AgentPrime can access what the permissions you grant cover, for example email, calendar events, contacts, tasks, files, documents and spreadsheets. It reads this when a request of yours needs it.
- Memory. Facts about you that you ask AgentPrime to remember, or that you approve when a task suggests them.
- Tasks, approvals and permissions. What you ask AgentPrime to do, your reminders and schedules, the requests it sends for your OK and your answers, and anything you allow it to do without asking each time.
- Cloud browser records. When AgentPrime uses its cloud browser for you: the sites it visits, screenshots of steps that change something (with what was typed into the page hidden), records of bookings and purchases you approved, and the cookies and site data the browser receives on those sites.
- Usage and technical records. A record of each AI model request and task (such as the kind of request, the model, its size, timing, cost and any error), server logs, and the basic information your browser sends when you visit our website, such as your IP address and browser type.
We use cookies only to keep you signed in and to protect sign-in and account-connection steps. We do not use advertising or third-party analytics cookies. Our web pages load fonts from Google Fonts, which receives your IP address when they load.
How we use it
- To provide AgentPrime: understand your requests, reply, carry out tasks, and send the reminders and updates you ask for.
- To sign you in, confirm the phone numbers you link, keep your account secure and prevent abuse.
- To run, troubleshoot and improve the reliability and cost of the service.
- To contact you about your account, such as sign-in codes and replies to support requests.
- To meet legal obligations.
We do not sell your personal information, and we do not use it for advertising. We do not train AI models on your messages or on information from your connected accounts.
How your messages are processed
A message you send travels through the messaging provider for that channel (for iMessage and SMS, Sendblue) to our servers. We store it in your conversation history and send it, with the context needed to answer (recent conversation, memory, settings, and anything a task reads from your connected accounts or the web), to our AI provider, which generates the reply or decides the next step. Text that comes from outside sources, such as an email someone sent you or a web page, is marked as untrusted, and AgentPrime is designed to treat it as information rather than as instructions.
Connected accounts
You decide which accounts to connect, and you choose their permissions on the provider's own screen. AgentPrime uses that access only to do what you ask: for example, checking your calendar to answer a question, or drafting an email that it sends only with your OK. Information is fetched when a request needs it. We do not keep a separate copy of your mailbox, calendar or files, but what AgentPrime reads can become part of your conversation history, a task's record, or a memory you approve.
The access tokens a provider issues are stored encrypted and are never shown in any page or message. You can disconnect an account at any time from your dashboard. AgentPrime then deletes its stored tokens and, for Google, asks Google to revoke its access, unless the same Google account is also connected to another AgentPrime account; in that case, or if a provider offers no way for apps to remove their own access (Microsoft, for example), you can remove AgentPrime in that account's own settings.
Google user data
AgentPrime's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we use Google user data only to provide the features you use in AgentPrime; we transfer it only as needed to provide those features (for example, to our AI provider to handle your request), to comply with law, or as part of a merger, acquisition or sale of assets with notice to you; we do not use it for advertising; we do not use it to develop, improve or train generalized AI or machine-learning models; and no person reads it unless you ask us to (for example, for support), it is needed for security or to investigate abuse, or the law requires it.
Microsoft 365
Microsoft 365 is not available yet. When it is, the same rules will apply to information from your Microsoft account.
AI providers
AgentPrime uses Anthropic's Claude models to understand your messages and decide what to do. We send Anthropic the content needed for each request, as described above. Anthropic's handling of that data is governed by its terms with us and its own privacy policy.
Service providers
We share information with these providers only as needed to run AgentPrime:
- Railway: hosts our servers and their logs.
- Neon: hosts our database.
- Anthropic: AI models.
- Sendblue: sends and receives iMessage and SMS, including sign-in codes.
- An email delivery provider: sends sign-in codes and links by email.
- Meta (WhatsApp Business Platform): WhatsApp messages, where WhatsApp is available to you.
- Fly.io: runs the cloud browser AgentPrime uses on websites for you.
- Tavily: web searches, which receive the search terms only.
- Google Maps Platform: searches for places such as restaurants.
- Google Fonts: fonts on our web pages.
The providers of accounts you connect, such as Google, receive AgentPrime's requests on your behalf. We may also disclose information if the law requires it, to protect the rights, safety or security of you, others or AgentPrime, or as part of a merger, acquisition or sale of assets. These providers may process information in the United States and other countries.
Approvals and what AgentPrime may do
AgentPrime asks for your OK before it sends a message or email for you, books, buys, shares or deletes anything, and shows you what it is about to do. You can allow some specific actions without asking each time; each such permission has a limit and an end date, and bookings, purchases and sharing are always asked. You can see what is waiting for you, and revoke any permission, in the app under Account.
Security
We protect your information with measures that include: access tokens and keys for connected accounts stored encrypted with AES-256-GCM; known secrets scrubbed from our server logs; sign-in codes that expire after five minutes; session cookies that page scripts cannot read; proof that a phone number is yours before it is linked to your account; and asking for your OK before actions that send, book, buy, share or delete, unless you have allowed them. No system is perfectly secure, and we cannot guarantee the security of your information. If you think your account has been misused, contact us right away.
How long we keep information
- We keep your account, conversations, memory, tasks and connections while your account is open, unless you delete them sooner.
- You can delete any memory at any time in the app under Account.
- When you disconnect an account, AgentPrime deletes the tokens it stored for it.
- Cloud browser screenshots are set to be deleted automatically 30 days after they are taken.
- Sign-in codes expire after five minutes.
Deleting your account. You can delete your account yourself in the app under Account. It removes, in one step, your profile, sign-in methods, sessions, passkeys, conversations, linked numbers, memory, tasks, approvals, permissions, connections and stored tokens, cloud browser data, and usage records tied to your account, and signs you out everywhere. AgentPrime also removes its access at providers that allow it, and tells you where to remove the rest. If you shared a project with another AgentPrime account, that project's shared history stays with it. Copies may remain for a limited time in our providers' backups and logs before they are overwritten, and we may keep information where the law requires it.
Your choices and rights
- See and download your history from Account.
- Correct your name, email and time zone under Account.
- Delete memories, revoke permissions, unlink numbers, disconnect accounts, or delete your whole account.
- Control updates and quiet hours under Notifications.
Depending on where you live, you may have rights to access, correct, delete or receive a copy of your personal information, and to object to or restrict some processing. To make a request we can't handle through the app, email hello@agentprimehq.com. We may need to confirm it is you before acting on it. You may also be able to complain to your local data protection authority.
Children
AgentPrime is not for children. You must be at least 18 years old to use it. We do not knowingly collect personal information from children; if you believe a child has given us information, contact us and we will delete it.
Changes to this policy
We may update this policy as AgentPrime changes. We will change the date at the top when we do, and if a change is significant we will take reasonable steps to let you know, such as a message from AgentPrime or a notice on this page.
Contact
Questions about privacy: hello@agentprimehq.com.