Privacy Policy

1. Scope of this Policy

This Policy explains how AF handles information when you use our services, visit our website, or connect third-party services (such as Google Workspace, Slack, or Notion) to AF-enabled apps and agents.

2. Information We Collect

• Account & workspace info: email, name, organization/tenant, and settings you provide.
• Connection metadata: provider (e.g., Google, Slack, Notion), scopes/capabilities granted, timestamps, and status.
• Third-party service data (only after consent): the data necessary to provide user-facing features you initiate, such as:
  • Google Workspace: Gmail messages, Chat messages, Drive/Docs/Sheets content, Calendar events, and other data you select for processing.
  • Slack: conversation metadata and message content from conversations where the bot is a member.
  • Notion: pages, databases, blocks, and properties you explicitly share with the integration.

We do not request write/modify scopes unless a specific feature requires it and you enable it.

3. How We Use Information

• To provide user-facing features (e.g., summarizing content, powering workflows, or enabling AI agent operations).
• To secure and operate AF (authentication, token rotation, fraud prevention, auditing, reliability).
• We do not use your data for advertising, and we do not sell personal information.

4. Human Access

No human reads your content except: (a) with your explicit permission (e.g., support tickets you authorize), (b) for security/compliance or service maintenance, or (c) where required by law.

5. Storage, Security, and Retention

• Tokens: Long-lived tokens are stored in a dedicated vault (OpenBao); access tokens are short-lived and typically in memory only.
• Content: By default, AF processes content in memory and does not persist message or document bodies. If you enable optional ephemeral caching for performance, cached content is encrypted at rest and auto-deleted within 24 hours (configurable).
• Audit logs: We store non-content metadata (tenant, user, provider, scope hash, operation, latency, outcome).
• Deletion: Disconnecting a service revokes tokens and deletes cached content associated with that connection. We process deletion requests within 30 days; audit logs may persist without content for security/compliance.

6. Your Choices & Access

• You can disconnect any integration at any time within AF or via the third-party service's settings.
• For Google, you can also revoke AF's access at https://myaccount.google.com/permissions.
• Contact support@agenticfabriq.com to request deletion of cached content linked to your connection.

7. International Transfers & Rights

If you are in a region with data protection rights (e.g., GDPR/UK GDPR/CCPA), you may have rights to access, correct, delete, or port your data. Contact support@agenticfabriq.com. AF may use sub-processors with appropriate contractual and security safeguards; a current list is available on request.

8. Cookies & Tracking Technologies

When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses.

Opt-Out: You may opt out of receiving this advertising by visiting https://app.retention.com/optout.

If you are located in the European Union or another region subject to GDPR, you may also opt out of the collection of your personal data by visiting https://www.rb2b.com/rb2b-gdpr-opt-out.

9. Changes

We may update this Policy from time to time. We will post changes with a new Effective date.

Contact

support@agenticfabriq.com