Privacy Policy

Last updated: March 19, 2026

AgentFlow ("we", "us", "our") operates the agentflow.cash website and SaaS platform. This Privacy Policy explains how we collect, use, and protect your information.

1. Information We Collect

When you use AgentFlow, we may collect:

• Account information — your name, email address, and billing details when you sign up.
• Shopify OAuth data — store name, product catalog, and order data accessed through the Shopify API with your explicit authorization.
• Social media tokens — OAuth tokens for platforms you connect (Instagram, Facebook, X/Twitter, Gmail) to enable agent automation.
• Usage data — agent activity logs, feature usage, and performance metrics to improve the service.

2. How We Store Your Data

All data is stored in Supabase with encrypted connections (TLS/SSL). OAuth tokens and API credentials are encrypted at rest. We use row-level security policies to ensure strict tenant isolation — your data is never accessible to other users.

3. How We Use Your Data

We use your data exclusively to:

• Operate and improve the AgentFlow platform.
• Run AI agents on your behalf (responding to DMs, generating content, monitoring competitors).
• Send you service-related notifications and billing communications.

4. We Never Sell Your Data

We do not sell, rent, or share your personal information or business data with third parties for marketing purposes. Period. Your Shopify data, customer conversations, and social media content remain yours.

5. Third-Party Services

We use the following third-party services to operate the platform:

• Stripe — for payment processing. We never store your full credit card number.
• Supabase — for database hosting and authentication.
• Anthropic (Claude AI) — for AI agent intelligence. Conversation data is processed but not retained by Anthropic for training.

6. GDPR Compliance

If you are in the European Economic Area, you have the right to:

• Access, correct, or delete your personal data.
• Export your data in a portable format.
• Withdraw consent for data processing at any time.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at hello@agentflow.cash. We respond within 30 days.

7. Data Retention

We retain your data for as long as your account is active. When you cancel your subscription, we delete your data within 30 days. Billing records may be retained longer as required by law.

8. Security

We implement industry-standard security measures including encrypted storage, secure API communications, and regular security audits. Enterprise plan customers can opt for self-hosted deployment where data never leaves their servers.

9. Contact

For any privacy-related questions or requests, reach us at:
hello@agentflow.cash