AgentFlow
Legal

Privacy Policy

This policy explains what data AgentFlow collects, why we collect it, and how you can control it.

Last updatedMay 20, 2026

1. Information we collect

  • Account information — When you create an AgentFlow account we collect your name, email address, and billing details.
  • Client data — When you add a client, you provide their website URL and configuration settings. We crawl that URL to train the AI agent.
  • Conversation data — Messages exchanged through deployed AI agents are stored so your agency can review performance and improve agent responses.
  • Usage data — We collect anonymised data about how you interact with the dashboard (page views, feature usage, error logs) to improve the product.

2. How we use your information

  • To operate and maintain the AgentFlow platform and your agency account.
  • To train and run AI agents on behalf of your clients across the channels you enable.
  • To process billing and send transactional emails (receipts, plan changes, usage alerts).
  • To send product updates and announcements — you can unsubscribe from marketing emails at any time.
  • To detect and prevent fraud, abuse, or violations of our Terms of Service.

3. Data sharing

  • We do not sell your personal information to third parties, full stop.
  • We share data with service providers that help us operate the platform — including cloud infrastructure (AWS), payment processing (Stripe), and AI model providers — under strict data processing agreements.
  • We may disclose information if required by law, court order, or to protect the rights and safety of AgentFlow, our users, or the public.
  • If AgentFlow is acquired or merges with another company, your data may transfer as part of that transaction. We will notify you in advance.

4. AI-generated conversations

  • Conversations handled by your deployed AI agents are stored on your behalf. You are the data controller for your clients' conversations; AgentFlow acts as a data processor.
  • Conversation data may be used in aggregate, anonymised form to improve model quality. It is never used to train models on behalf of other agencies.
  • You can delete a client and all associated conversation history at any time from the dashboard.

5. Data retention

  • Account and billing data is retained for as long as your account is active and for up to 7 years afterward for legal and tax compliance.
  • Conversation data is retained for 12 months by default. Pro and Agency plan subscribers can configure a custom retention window.
  • If you delete your account, we delete or anonymise your personal data within 30 days, except where retention is legally required.

6. Security

  • All data is encrypted in transit (TLS 1.3) and at rest (AES-256).
  • Access to production systems is restricted to authorised personnel and requires multi-factor authentication.
  • We conduct regular security reviews and vulnerability assessments.
  • If we become aware of a breach that affects your data, we will notify you within 72 hours as required by applicable law.

7. Your rights

  • Access — You can download a copy of your account data from Settings > Account.
  • Correction — You can update your profile information at any time.
  • Deletion — You can delete your account and all associated data from Settings > Account, or by emailing privacy@agentflow.ai.
  • Portability — You can export conversation data in JSON format from the Conversations page.
  • Objection — If you are in the EU or UK, you may object to certain processing activities. Contact us at privacy@agentflow.ai.

8. Cookies

  • We use strictly necessary cookies to maintain your login session.
  • We use analytics cookies (anonymised, first-party) to understand how the dashboard is used. You can opt out in Settings > Privacy.
  • We do not use third-party advertising cookies.

9. Children

  • AgentFlow is intended for use by marketing agencies and businesses. We do not knowingly collect data from anyone under 16. If you believe a child has provided us with personal information, contact privacy@agentflow.ai and we will delete it promptly.

10. Changes to this policy

  • We will notify you of material changes to this policy by email and by posting a notice in the dashboard at least 14 days before the change takes effect. Continued use of AgentFlow after that date constitutes acceptance of the updated policy.

11. Contact

  • Questions about this policy or how we handle your data? Email privacy@agentflow.ai or write to: AgentFlow, Inc., 340 Pine Street, Suite 800, San Francisco, CA 94104, USA.
Have a question?
Email us at privacy@agentflow.ai and we will respond within 2 business days.