Privacy Policy · Agentic Flow

Overview

This policy explains what Agentic Flow ("we", "us") collects, why, and the choices you have. We aim to collect the minimum needed to run the service and to keep your code and prompts under your control.

Information we collect

Account data — your name, email, and organization membership, used to authenticate you and scope access.
Workspace content — boards, tasks, missions, comments, and agent-run history you create. Stored to provide the product.
Credentials you connect — API keys and integration secrets are stored encrypted and used only to perform the actions you request. We never sell them.
Operational logs — timestamps, IP, and error diagnostics needed to run and secure the service.

Local and open models

When you run work on a local or open model (for example, an Ollama daemon on your own machine, or an OmniRoute gateway you point us at), your prompts and code are sent to that endpoint — not to us or a third-party cloud. Escalation to a frontier model happens only under the routing policy you configure, and uses the provider key you bring.

Third-party providers

When you connect an integration (MCP server) or escalate to a cloud model, the relevant request is sent to that provider under their terms. We pass along only what the action requires. Marketing pages may load provider logos from public CDNs (e.g. GitHub avatars, Simple Icons) for identification purposes.

How we use data

To operate, secure, and improve the service.
To enforce budgets, governance policies, and plan limits.
To communicate with you about your account (transactional email).

We do not use your private workspace content or code to train models.

Retention & deletion

We keep account and workspace data while your account is active. You can delete workspace content at any time; deleting your organization removes associated data on a routine schedule, subject to backups and legal obligations.

Security

Data is encrypted in transit (TLS) and secrets are encrypted at rest. Our infrastructure runs on Fly.io, whose platform compliance underpins our hosting. No system is perfectly secure, but we work to protect your data and disclose material incidents.

Your rights

You may access, correct, export, or delete your personal data. Contact us and we will respond within a reasonable period.

Changes

We may update this policy; material changes will be posted here with a new "last updated" date.