Your data stays yours
Enterprise-grade protection, no worries: you do the work, we handle the security.
This page pops the hood: what we protect, how we do it and what you can do. The full legal details live in the privacy policy — here we explain them in plain language.
Your data, separated
Every account only sees its own data: agents, conversations and purchases stay private and separated from the others.
Encrypted connections
Connections to Shopify, Google and the other services are encrypted and you can revoke them in one click, whenever you want.
Secure payments
Payments with Stripe and PayPal: we neither see nor store your card details.
Protected access
Sign in with email or Google, with secure sessions and full control from your account.
Only the access you need
Each agent only uses the integrations it actually needs, no extra access.
Transparency and control
Export or delete your data whenever you want from settings, in line with GDPR.
How we protect your data
Encryption on every hop
Everything traveling between your browser and AgentCloud goes over TLS. The tokens you use to connect Shopify, Google and the other services are encrypted at rest with AES-256-GCM and the keys stay on the server: no credential ever sits in the database in plain text.
Data separated per account
The database enforces row level security: every row is visible only to the owning account. Another user's agents, conversations, subscriptions and connections are unreachable — by design, not by promise.
Least privilege, everywhere
Access to systems follows the least-privilege principle, secrets are encrypted and handled server-side only, and rate limiting protects against abuse. Each agent only uses the integrations it actually needs.
Access to your account
You sign in with email or Google through Supabase Auth: passwords are stored only as salted hashes, never in plain text. Sessions are secure, you can revoke integrations in one click, and control stays in your account.
Your card stays with Stripe and PayPal
Stripe and PayPal collect your card and payment credentials directly. Our servers only receive a token, the card network and the last few digits: we never see or store the full number.
Your conversations don't train models
Neither we nor the model provider (Anthropic) use chat contents to train AI models. Conversations are never sold and are not used for advertising.
GDPR: export, delete, control
From settings you can export or delete your data at any time. To exercise your rights (access, rectification, erasure, objection) just write to privacy@agentcloud.agency: we reply as the law requires.
Who sees your data
Few hands, all declared: these are the providers that process data on our behalf, each limited to its own role.
- Supabasedatabase and authentication
- Stripepayments and billing
- PayPalpayments and billing
- Resendtransactional email (welcome, receipts, alerts)
- AnthropicAI model inference
- GoogleGoogle account sign-in and connected services
- Vercelhosting and aggregate web analytics
- Shopify, Slack, Notion, HubSpot…the integrations you connect
Data outside Europe
Some providers are located outside the European Economic Area (Vercel, Supabase, Anthropic and Stripe in the United States). For transfers we rely on the European Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework certification, together with encryption in transit and at rest.
Security frequently asked questions
Who can read my conversations?
Only your account, thanks to the database's row level security rules. Operator access is limited to strict technical necessity, following the least-privilege principle.
Do you use my data to train AI?
No. Neither we nor Anthropic use conversation contents to train models. Data is never sold nor used for advertising.
Where is my data stored?
On infrastructure run by Supabase and Vercel, with encryption in transit and at rest. For details on providers and transfers, see above.
Can I delete everything?
Yes: from settings you can export your data as JSON and delete your account and its data. For specific requests write to privacy@agentcloud.agency.
How do I report a vulnerability?
Write to privacy@agentcloud.agency with the details: we read every report and reply. We thank everyone who helps us make the platform more secure.
The rest is in the policy
Privacy and terms contain the full details: purposes, retention, rights and data processors.