Privacy Policy

Account Information

When you sign in with Google OAuth, we collect your name, email address, and profile picture. This information is used to create and manage your Agentcy account.

Marketing Data

When you make queries, Agentcy connects to your authorized marketing platforms (GA4, Search Console, Google Ads, etc.) to fetch data in real-time. This data is processed to generate insights and is not stored long-term. We do not maintain a copy of your marketing data after the response is delivered.

Usage Data

We collect information about how you use the service, including queries made, services used, response times, and error rates. This data is used to improve service quality, monitor performance, and enforce usage quotas.

Billing Information

Payment processing is handled entirely by Stripe. We do not store credit card numbers or other payment instrument details on our servers. Stripe may collect information necessary to process your payments in accordance with their own privacy policy.

Agentcy's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only use Google data to provide and improve user-facing features of Agentcy.
• We do not transfer Google data to third parties except as necessary to provide and improve user-facing features, as required by law, or with your explicit consent.
• We do not use Google data for advertising purposes or to build advertising profiles.
• We do not allow humans to read Google data unless you have given affirmative consent, it is necessary for security purposes (e.g., investigating abuse), it is required to comply with applicable law, or the data has been aggregated and anonymized for internal operations.

• Provide the service — authenticate your identity, connect to your marketing data sources, execute queries, and deliver synthesized insights.
• Improve the service — analyze usage patterns, identify errors, optimize performance, and develop new features.
• Communicate with you — send service announcements, respond to support requests, and notify you of material changes to our policies.
• Billing — manage your subscription, enforce usage quotas, and process payments through Stripe.

We employ industry-standard security measures to protect your data:

• Database — Supabase with Row Level Security (RLS), providing multi-tenant isolation so one account's data can never be accessed by another.
• Credential Encryption — API keys and secrets you provide are encrypted using Supabase Vault (AES-256-GCM) and never stored in plaintext.
• Hosting — Cloudflare Workers for edge computing with global distribution.
• Transmission — All data is transmitted over HTTPS/TLS. We do not accept unencrypted connections.

Agentcy integrates with the following third-party services to operate:

• Supabase — database hosting and authentication.
• Cloudflare — application hosting and content delivery.
• Stripe — payment processing and subscription management.
• Google — OAuth authentication and marketing APIs (GA4, Search Console, Google Ads, YouTube, GTM, Google Sheets).
• xAI — AI synthesis. Your query text is processed by AI models to generate marketing insights. Query text is sent to xAI for processing and is subject to xAI's privacy policy.

Each third-party service operates under its own privacy policy. We encourage you to review those policies for information on how they handle data.

• Marketing data — processed in real-time and not stored. Data is fetched, synthesized, and returned within a single request lifecycle.
• Usage logs — retained for service analytics, quota enforcement, and billing reconciliation.
• Account data — retained while your account is active and for a reasonable period afterward to comply with legal obligations.
• Credentials — encrypted and stored only while the associated service is connected. Credentials are permanently deleted when you disconnect a service or delete your account.

You have the following rights regarding your data:

• Access — view your data at any time through the Agentcy portal.
• Deletion — request deletion of your account and all associated data.
• Disconnect — disconnect any third-party service at any time through the portal. Associated credentials are deleted immediately.
• Export — export your usage data.

To exercise any of these rights, contact us at legal@goagentcy.com.

Agentcy uses cookies solely for authentication session management (Supabase auth cookies). We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

Agentcy is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or through a prominent notice in the Agentcy portal. Your continued use of the service after such notification constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, contact us:

• Email: legal@goagentcy.com
• Redstitch Digital
• Arizona, United States