Legal

Privacy Policy

Effective date: March 28, 2026

AgntCraft ("Service") is operated by Hassan Ventures LLC ("Company," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. Please read this policy carefully. By using AgntCraft, you consent to the data practices described in this policy.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and any other information you provide during registration. If you subscribe to a paid plan, payment information is collected and processed by our third-party payment processor, Stripe. We do not directly store your payment card details.

Usage Data

We automatically collect information about how you interact with the Service, including:

• Pages visited and features used
• Agent creation and execution logs
• Device type, browser type, and operating system
• IP address and approximate geographic location
• Referring URLs and session duration

Agent Configurations

We store the agent configurations, prompts, workflows, and settings you create within the Service. This data is necessary to operate your agents and provide the Service.

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the Service — run your agents, process workflows, and deliver results.
• Improve the product — analyze usage patterns to enhance features, fix bugs, and optimize performance.
• Communicate with you — send service-related notices, updates, security alerts, and support messages.
• Process payments — manage subscriptions and billing through our payment processor.
• Ensure security — detect and prevent fraud, abuse, and unauthorized access.
• Comply with legal obligations — respond to lawful requests and enforce our Terms of Service.

We do not sell your personal information to third parties.

3. Third-Party AI Models

AgntCraft uses third-party AI model providers to power agent intelligence, including OpenAI, Anthropic, Google, and xAI. When your agents execute, relevant data (such as prompts and context) is sent to these providers for processing. Important details:

• Data sent to AI model providers is used solely to generate responses for your agents and is not used to train their models.
• We have data processing agreements with each provider that restrict how your data may be used.
• We transmit only the minimum data necessary for agent execution.
• You can review which AI models your agents use within the Service settings.

4. Third-Party Integrations

When you connect third-party services (such as Gmail, Google Calendar, Slack, HubSpot, and others) to AgntCraft, we use OAuth 2.0 for authentication. Regarding your integration data:

• OAuth tokens are stored encrypted at rest using AES-256 encryption.
• We only access the data and permissions you explicitly authorize.
• We do not store the content of your emails, messages, or documents beyond what is needed for active agent execution.
• You can revoke access to any connected service at any time through your account settings or the third-party service's own settings.

5. Data Storage and Security

We take the security of your data seriously and implement industry-standard measures to protect it:

• Encryption at rest: All stored data is encrypted using AES-256 encryption.
• Encryption in transit: All data transmitted between your browser and our servers uses TLS 1.2 or higher.
• Access controls: Internal access to user data is restricted to authorized personnel on a need-to-know basis.
• Infrastructure: We use reputable cloud hosting providers with SOC 2 compliance.

While we implement robust security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention

• Active accounts: Your data is retained for as long as your account is active and as needed to provide the Service.
• Deleted accounts: When you delete your account, we will purge your personal data, agent configurations, and associated data within 30 days. Some data may be retained in backups for up to 90 days before being permanently deleted.
• Anonymized data: We may retain aggregated, anonymized data that cannot be linked back to you for analytical purposes.
• Legal obligations: We may retain certain data as required by applicable laws or to resolve disputes.

7. Cookies

We use minimal cookies to operate the Service:

• Essential cookies: Required for authentication and core functionality. These cannot be disabled.
• Analytics cookies: We use privacy-respecting analytics to understand how users interact with the Service. These cookies do not track you across other websites.

We do not use advertising cookies or share cookie data with third-party advertisers.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete personal data.
• Deletion: Request that we delete your personal data, subject to legal retention requirements.
• Data portability: Request a machine-readable copy of your data for transfer to another service.
• Restriction: Request that we limit the processing of your data in certain circumstances.
• Objection: Object to the processing of your personal data where we rely on legitimate interests.

To exercise any of these rights, please contact us at privacy@agntcraft.com. We will respond to your request within 30 days.

9. Children's Privacy

AgntCraft is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at privacy@agntcraft.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by:

• Posting the updated policy on our website with a new "Effective date."
• Sending an email notification to the address associated with your account for significant changes.

Your continued use of the Service after the updated policy is posted constitutes your acceptance of the changes. We encourage you to review this policy periodically.

11. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: privacy@agntcraft.com
Company: Hassan Ventures LLC
Location: Colorado, USA