Privacy Policy

We collect the information you provide directly, such as your name and email address when you sign in with email/OTP or Google, and profile details you choose to add during onboarding (role, avatar, plan selection).

We also collect content you submit to the console for processing — chat messages, uploaded documents and URLs (for the Agent X Brain knowledge engine), voice recordings submitted for transcription or spoken as voice commands, and images submitted for generation or analysis.

If you connect your own AI provider API keys (BYOK), those keys are stored only to authenticate your requests to that provider and are never shared with other users.

To operate reliably, the Service also keeps limited internal operational records: a bounded, rolling audit trail of processing steps for a given request (which provider was tried, whether a step succeeded, timing) tagged with an internal run identifier; a journal of agent actions you’ve consented to (with enough detail to let you undo them); and, for long-running jobs such as a live code preview build, a short-lived checkpoint of how far that job got so it can resume instead of restarting after a dropped connection. These records describe the mechanics of processing your request — not additional content about you — and are retained only as described in Section 5 below.

We use collected information to operate and maintain the console, authenticate your sessions, route your requests to the AI providers you’ve selected or connected, maintain presence and group chat state, and improve reliability and performance of the Service.

Agent X routes requests to third-party AI model providers to generate responses, transcribe speech, and synthesize spoken replies. Depending on which model or feature you use (and which BYOK key, if any, you’ve connected), this can include: Google Gemini, Groq, OpenRouter, OpenAI, Anthropic (Claude), DeepSeek, Mistral AI, Meta Llama, Cohere, and Alibaba Qwen for text generation; Groq’s Whisper models for speech-to-text transcription (including transcribing spoken voice commands); Google Gemini and ElevenLabs for text-to-speech voice synthesis; Google Custom Search for web-research features (Fix-It Live Research, the Detective Deep-Research tool, and web-scrape chat send your search topic to Google to find sources); and Hugging Face’s Inference API as a fallback video-generation provider when a dedicated video model isn’t configured or fails (your prompt and, for image-to-video, your uploaded image are sent to Hugging Face). Content you submit for processing is sent only to the provider associated with your selected model, connected key, or the specific feature you used, and is subject to that provider’s own data handling terms.

We do not sell your personal information. We share information only with the AI providers necessary to fulfill your requests (Section 3), with infrastructure providers who help us run the Service — including Supabase for database and backend storage where configured — or when required by law.

We retain account and session data for as long as your account is active, and apply reasonable technical safeguards (including session token hardening and secure cookie handling) to protect it. The internal operational records described in Section 1 (the audit trail, action journal, and job checkpoints) are kept only briefly and on a bounded, rolling basis — each is capped in size and age, with the oldest entries automatically aged out or expired rather than retained indefinitely — and exist to make the Service work reliably, not as a separate record of your activity. No method of transmission or storage is ever completely secure, and we cannot guarantee absolute security.

You can review and update your profile from within the console’s Settings panel, disconnect a BYOK provider key at any time, and request account deletion by contacting us (see our Contact page).

The public marketing site (not the authenticated console) may display advertisements served by Google, using cookies and similar technologies. Google and its partners may use the DoubleClick DART cookie and comparable identifiers to serve ads based on your visits to this and other sites.

You can opt out of personalized advertising by visiting Google Ads Settings, or opt out of a participating vendor’s use of cookies for personalized advertising by visiting www.aboutads.info/choices. You can also manage your consent at any time using the cookie banner shown on this site, or via the “Do Not Sell or Share My Personal Information” option described below. See Google’s how Google uses information from sites that use its services page for details on Google’s own data practices as an advertising vendor.

If you are located in the European Economic Area or the United Kingdom, you have the right to access, correct, or delete your personal data; restrict or object to certain processing; receive a copy of your data in a portable format; and withdraw consent (including advertising consent, via the cookie banner) at any time without affecting the lawfulness of processing before withdrawal. You may lodge a complaint with your local data protection supervisory authority. To exercise any of these rights, contact us via our Contact page.

If you are a California resident, you have the right to know what personal information we collect, request deletion or correction of that information, and opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising — which may include the advertising cookies described above. You will not receive discriminatory treatment for exercising these rights. Use the “Do Not Sell or Share My Personal Information” option in the cookie banner on this site, or contact us via our Contact page, to exercise these rights.

Agent X is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us via our Contact page and we will take steps to delete it.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

Questions about this policy can be sent via our Contact page.