Legal
Privacy Policy
This policy explains what data AgentFlow collects, why we collect it, and how you can control it.
Last updatedMay 20, 2026
1. Information we collect
- Account information — When you create an AgentFlow account we collect your name, email address, and billing details.
- Client data — When you add a client, you provide their website URL and configuration settings. We crawl that URL to train the AI agent.
- Conversation data — Messages exchanged through deployed AI agents are stored so your agency can review performance and improve agent responses.
- Usage data — We collect anonymised data about how you interact with the dashboard (page views, feature usage, error logs) to improve the product.
2. How we use your information
- To operate and maintain the AgentFlow platform and your agency account.
- To train and run AI agents on behalf of your clients across the channels you enable.
- To process billing and send transactional emails (receipts, plan changes, usage alerts).
- To send product updates and announcements — you can unsubscribe from marketing emails at any time.
- To detect and prevent fraud, abuse, or violations of our Terms of Service.
3. Data sharing
- We do not sell your personal information to third parties, full stop.
- We share data with service providers that help us operate the platform — including cloud infrastructure (AWS), payment processing (Stripe), and AI model providers — under strict data processing agreements.
- We may disclose information if required by law, court order, or to protect the rights and safety of AgentFlow, our users, or the public.
- If AgentFlow is acquired or merges with another company, your data may transfer as part of that transaction. We will notify you in advance.
4. AI-generated conversations
- Conversations handled by your deployed AI agents are stored on your behalf. You are the data controller for your clients' conversations; AgentFlow acts as a data processor.
- Conversation data may be used in aggregate, anonymised form to improve model quality. It is never used to train models on behalf of other agencies.
- You can delete a client and all associated conversation history at any time from the dashboard.
5. Data retention
- Account and billing data is retained for as long as your account is active and for up to 7 years afterward for legal and tax compliance.
- Conversation data is retained for 12 months by default. Pro and Agency plan subscribers can configure a custom retention window.
- If you delete your account, we delete or anonymise your personal data within 30 days, except where retention is legally required.
6. Security
- All data is encrypted in transit (TLS 1.3) and at rest (AES-256).
- Access to production systems is restricted to authorised personnel and requires multi-factor authentication.
- We conduct regular security reviews and vulnerability assessments.
- If we become aware of a breach that affects your data, we will notify you within 72 hours as required by applicable law.
7. Your rights
- Access — You can download a copy of your account data from Settings > Account.
- Correction — You can update your profile information at any time.
- Deletion — You can delete your account and all associated data from Settings > Account, or by emailing privacy@agentflow.ai.
- Portability — You can export conversation data in JSON format from the Conversations page.
- Objection — If you are in the EU or UK, you may object to certain processing activities. Contact us at privacy@agentflow.ai.
8. Cookies
- We use strictly necessary cookies to maintain your login session.
- We use analytics cookies (anonymised, first-party) to understand how the dashboard is used. You can opt out in Settings > Privacy.
- We do not use third-party advertising cookies.
9. Children
- AgentFlow is intended for use by marketing agencies and businesses. We do not knowingly collect data from anyone under 16. If you believe a child has provided us with personal information, contact privacy@agentflow.ai and we will delete it promptly.
10. Changes to this policy
- We will notify you of material changes to this policy by email and by posting a notice in the dashboard at least 14 days before the change takes effect. Continued use of AgentFlow after that date constitutes acceptance of the updated policy.
11. Contact
- Questions about this policy or how we handle your data? Email privacy@agentflow.ai or write to: AgentFlow, Inc., 340 Pine Street, Suite 800, San Francisco, CA 94104, USA.
Have a question?
Email us at privacy@agentflow.ai and we will respond within 2 business days.