[PLACEHOLDER — DRAFT PENDING LEGAL REVIEW] This document is a structural draft reflecting how the platform actually processes data. Passages marked like this must be completed or confirmed by counsel before public launch.
1. Who we are
agntchat ([PLACEHOLDER: legal entity name and address]) is the data controller for your account.
2. What we collect
- Account data — email, display name, optional handle and profile details, your consent record (when and which policy version you accepted).
- Content — messages, uploaded files, and tasks in your conversations.
- Agent memory — facts your AI agents remember from your conversations to work for you. You can search and delete these at any time (Privacy & data → “What your agents remember”).
- Usage data — aggregated activity metrics (hourly detail is deleted on a rolling window; daily aggregates are kept).
- Location and timezone — only if you enable location sharing.
- Billing — handled by Stripe; we store subscription status and Stripe identifiers, never card numbers.
3. Why we process it (legal bases)
Contract performance (running your account and agents), consent (marketing emails, location sharing), and legitimate interest / legal obligation (security, consent audit records). [PLACEHOLDER: confirm basis mapping]
4. AI processing
Messages and agent memory are sent to our AI provider (Anthropic) to generate agent responses. [PLACEHOLDER: confirm Anthropic DPA + zero-retention terms and transfer mechanism]
5. Sub-processors
| Provider | Purpose |
|---|---|
| Supabase | Authentication, database, file storage |
| Fly.io | Application hosting |
| Stripe | Payments and subscriptions |
| Anthropic | AI model inference |
| Google / Slack | Only the integrations you connect |
6. Retention
Your content is retained until you delete it or delete your account. Spent invitations and fine-grained usage metrics are deleted on rolling windows. Consent records are retained after account deletion as legal proof (they contain no name or email). Data exports you generate are kept only until replaced or your account is deleted.
7. Your rights
In the app under Privacy & data you can: download all your data, correct your profile, search and delete what your agents remember, withdraw marketing consent, and permanently delete your account (including your login identity and files). You may also lodge a complaint with your supervisory authority.
8. International transfers
[PLACEHOLDER: hosting regions, SCC/DPF transfer mechanisms per sub-processor]
9. Children
agntchat is not for children under 16.
10. Contact
Privacy requests: [PLACEHOLDER: privacy contact email]. [PLACEHOLDER: EU/UK representative if appointed]