Privacy Policy
Effective date: July 14, 2026
Who we are
Agentive (“we,” “us”) provides a tool that reads your connected Gmail, Slack, and Google Drive to draft reusable skill files. For the purposes of data-protection law, we are the data controller for the personal data described here. This policy explains what data we access when you connect a source, what we store, who we share it with, and how to exercise your rights over it. For any legal notice or question about this policy, contact support@agentive.win.
What we access
You choose which tools to connect and grant access to at OAuth-connection time. We currently support Gmail, Slack, and Google Drive, each via read-only OAuth scopes — the permission Google or Slack grants us structurally cannot post, edit, or delete anything in your account. You can review the exact scope on the provider’s consent screen before granting it, and disconnect a source at any time from Settings.
What we store — and what we don't
When you run a scan, message and document content from connected sources passes through our processing pipeline to identify repeated procedures. What we persist to our database is the drafted skill text and citations (a pointer back to the source thread, email, or file — not its contents). We do not store the raw body of your emails, Slack messages, or Drive files at rest; this is enforced by an automated test that scans every database column after every scan and fails the build if raw content is ever found there.
OAuth tokens are encrypted at rest (Fernet, with key rotation) and are never exposed to the browser. Each customer’s data is isolated at the database level via row-level security, so one account structurally cannot query another’s rows.
Third parties we share data with
Reading your connected sources and drafting skills requires passing content to a small number of subprocessors, transiently, to do that work:
- Anthropic — receives source content to draft and refine skill text.
- Voyage AI — receives source content to generate the embeddings used to detect repeated procedures.
- Google, Slack — the OAuth identity providers for your connected sources.
- Stripe — processes subscription payments; we do not store your card details.
- Clerk — handles sign-in and session authentication.
- Resend — sends transactional email (notifications, digests).
- Cloudflare R2 — stores exported SKILL.md files you generate.
- Sentry — receives error/crash reports to help us fix bugs.
- Meta Platforms— our advertising partner. Only if you accept advertising cookies, we share limited event data (including a one-way hashed version of your email) to measure the effectiveness of our ads. See “Cookies and advertising” below.
Each of these subprocessors processes your data only to perform the function listed, under the data-processing and confidentiality terms in our agreement with them, and is not permitted to use it for their own unrelated purposes. Content sent to Anthropic and Voyage AI to draft skills and generate embeddings is processed under their business/API terms and is not used to train their general models.
Cookies and advertising
We use cookies that are strictly necessary to run the site — keeping you signed in, remembering your light/dark theme, and recording your cookie choice. These do not require consent and cannot be turned off without breaking the site.
We advertise on Meta (Facebook and Instagram). To measure which ads work, we use the Meta Pixel and Meta’s Conversions API — but only after you accept advertising cookies on the banner shown on your first visit. If you decline, the Pixel never loads, no advertising cookies are set, and we do not send purchase events to Meta. When you do accept, we share limited event data (page views, checkout start, and completed purchase) and a one-way hashed version of your email with Meta solely to attribute conversions to our ads. You can change or withdraw this consent at any time from the Cookie Policy page or the “Cookie preferences” link in the footer.
Data retention and deletion
Drafted skills and citations for a source are retained until you disconnect that source or delete your account. Disconnecting a source immediately stops new citations into it; a nightly reconciliation job removes citations tied to revoked connections.
You can delete your account and all associated data yourself at any time from Settings → Account → Delete account. Deletion removes your skills, drafts, evidence citations, source connections and exports in one irreversible step, and revokes the read-only tokens we hold for your connected tools. If you prefer, or if anything fails, you can also email support@agentive.win and we will carry out the deletion for you. Either way, deletion completes within 30 days at the latest (in practice, immediately).
Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these, email support@agentive.win. If you are in the European Economic Area or the UK, this includes the right to access, rectify, erase, or export your data, restrict or object to processing, and lodge a complaint with your local data protection authority. If you are a California resident, you have the right to know what personal information we collect, request its deletion, and not be discriminated against for exercising these rights — Agentive does not sell your personal information. We aim to respond to any request within 30 days; contact us at the email address above to make one.
International data transfers
Our database and background workers run on Render’s infrastructure in Oregon, USA. Exported files are stored in Cloudflare R2, and the website is hosted on Vercel. If you are located outside the United States, using Agentive means your data is transferred to and processed in the United States. Our subprocessors (Anthropic, Voyage, Stripe, Clerk, Resend, Cloudflare, Sentry, Google, Slack) are primarily US-based companies and may process data in the US or other countries where they operate, under their own standard data-transfer safeguards.
Children's privacy
Agentive is a business tool and is not directed to, and should not be used by, anyone under 18.
Changes to this policy
We may update this policy as the product changes. Material changes will be reflected by updating the effective date above.
Contact
Questions about this policy: support@agentive.win