Privacy Policy

Last updated: November 2026

1. Our Core Principle: BYOK (Bring Your Own Keys)

AGENTHEORY does not sell, broker, or mark up AI model usage. You supply your own API keys from supported AI providers (OpenAI, Google Gemini, Groq, OpenRouter, xAI). Your prompts and responses flow directly between our application servers and your chosen AI provider using your credentials.

2. How Your Secrets Are Stored

Your third-party API keys and mailbox passwords are encrypted immediately upon submission using authenticated AES-256-GCM encryption with unique initialization vectors (IVs). Encryption keys reside exclusively in secure server environment variables and are never exposed to browser clients or stored in plain text.

3. Information We Collect

• Account Information: Your email address and authentication identifier managed via Supabase Auth.
• Agent Configurations: Agent names, prompts, tool settings, and channel IDs you configure.
• Conversations: Chat messages exchanged with your agents across Web, Telegram, and Discord to maintain conversational continuity.
• Tool Integrations: Scheduled tasks, calendar items, and connected mailbox credentials necessary to execute the automations you request.

4. We Do Not Train AI Models

We do not use your private data, agent definitions, conversation transcripts, or uploaded documents to train or fine-tune public foundation models.

5. Data Retention & Deletion

You have full sovereignty over your data. You may download a complete copy of your data in JSON format or trigger a complete account deletion at any time from your Settings page. Deletion purges all database records and revokes external webhook registrations.

6. Contact & Data Requests

For privacy inquiries or data rights requests, contact us at support@agentheory.space.