This policy explains what we collect, why, and the choices you have. The short version: your agent's workspace is private to you, we never use it to train models, and it's wiped for good when you cancel.
What we collect
Account data — your email address, login codes, and basic account settings.
Billing data— handled by our payment processor; we don't store full card numbers.
Workspace content — what you and your agent exchange: conversations, files, learned skills, and credentials you choose to connect.
Usage & diagnostics — logs about service health and feature usage, used in aggregate.
Analytics & campaign data — when allowed by your choices, page views and product interactions, referring pages, campaign parameters, advertising click identifiers, pseudonymous browser and session identifiers, and conversion details such as the product and transaction reference.
How we use it
We use your data to run your agents, process billing, provide support, keep the service secure, and understand — in aggregate — how the product is used so we can improve it. We don't sell your personal data, and we don't use your workspace content for advertising.
Analytics, advertising & support tools
We separate optional tools into three choices. Functional loads Crisp support chat. Analytics enables browser-based Google Analytics 4 and PostHog to measure pages, funnels, and product performance. Advertising enables Google Ads and the Meta Pixel for campaign measurement, conversion reporting, and remarketing. Google Signals and personalized advertising features may also be used when Advertising is selected and those features are enabled in our Google account.
When Analytics or Advertising is selected, we may keep first-party attribution in this browser, including UTM campaign fields and, for Advertising, Google click identifiers such as gclid, gbraid, and wbraid. When checkout begins, consented attribution, a pseudonymous analytics client or session identifier, and the saved consent state may be linked to the setup so a verified trial or payment can be attributed without putting those identifiers in the checkout return URL.
For lead and customer conversion matching, the site may create a one-way SHA-256 hash from a normalized email address. For Google enhanced conversion matching, that hash is used only in the provider-designated user-data field when Advertising is selected; it is not used as an analytics event name, event parameter, or transaction identifier. We do not send the raw email address as a GA4 event parameter.
Separately, we record server-side account, checkout, billing, provisioning, and service lifecycle events to operate and audit the service; some of these events are processed in PostHog. They may use account, setup, or transaction references, but do not include agent conversations or workspace file contents.
Google Consent Mode starts with analytics storage, advertising storage, advertising user data, and ad personalization denied unless a saved choice grants them. With those choices denied, Google may still receive limited cookieless signals containing consent and event context. Meta Pixel, browser-based PostHog, and Crisp are requested according to the Advertising, Analytics, and Functional choices described above.
We do not intentionally send agent conversations, workspace files, or connected-channel credentials to analytics or advertising tools. Text you choose to enter into Crisp is sent to Crisp so the support conversation can be delivered.
Your agent's workspace
Every agent runs in its own isolated container. Its conversations, learned skills, and credentials stay on that instance — nothing is shared across accounts, and nothing from your workspace is used to train models. Our staff access workspace content only when needed to resolve a support request you've made, or as required by law.
Retention & deletion
We keep account data while your account is active. When you cancel a subscription, that agent's workspace is permanently deleted, and residual copies are purged from backups within 30 days. Delete your account and we remove your account data too, except what we must keep for legal or accounting reasons.
Security
Data is encrypted in transit, workspaces are isolated per user, and internal access follows least-privilege rules. No system is perfectly secure, but if a breach affects your data we'll notify you promptly and tell you what happened and what we're doing about it.
Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. Email us and we'll honor these requests as the law requires.
Children
AdsByAgents is a business tool and isn't directed at children under 16. If you believe a child has given us personal data, contact us and we'll delete it.
Changes to this policy
We'll post updates here and, for material changes, notify you by email or in the console before they take effect.
Contact
Privacy questions or requests: support@adsbyagents.com.