Privacy Policy

Agenta reads your inbox for one purpose: to identify the requests directed at you. Because that is genuinely sensitive, this policy is specific about what we access, where it goes, and what you can demand of us.

Who is responsible for your data

Agenta is operated by C.S DENG & P MA, a general partnership established in Australia (ABN 77 904 113 957), at 30 Kinarra Street, Ashmore QLD 4214, Australia. We are the data controller for the information described here. Privacy questions and requests: admin@helloagenta.com.

What we access

With your explicit authorisation, Agenta reads email metadata and message content from the mailboxes you connect, and reads your calendars. We cannot delete or modify anything already in your mailbox.

We can send the emails you write in Agenta, from your own address. That permission is a separate grant you give per mailbox, sending is never automatic, and you confirm every message before it leaves. Calendar events are likewise created only when you explicitly ask for one.

What we store

We store extracted tasks, the message context attached to those tasks, task updates, projects, collaboration membership, the person, workspace, and relationship context you save, connected-account credentials encrypted at rest, feedback you submit, a bounded cache of calendar events, and subscription status and identifiers from Stripe. Stripe processes payment-card details; Agenta does not store your full card number. We do not copy or retain your entire mailbox.

Using Inbox also stores:

• Drafts you write in Agenta, including recipients, subject and body, until you send or delete them. A draft lives in our database because your mailbox has no copy of it until it is sent.
• Your sorting rules and the context you write about which mail matters to you, so sorting is the same on every device.
• Sorting decisions: when AI sorting is on, a keep-or-hide verdict and a short reason, stored against a message identifier so each message is judged once rather than repeatedly. We do not store the message body for this.
• Your corrections - the thumbs up and down you give a message, and the rule you chose from it - so sorting improves instead of repeating a mistake.
• Relationship-context suggestions - a short proposed fact and a bounded supporting excerpt when a message processed during a scan contains durable information that may help future communication. Suggestions stay pending and are not used for drafting until you accept them. You can edit or dismiss each suggestion.

Why we are allowed to do this

Where the GDPR or similar law applies, our lawful bases are: performance of a contract for scanning your inbox and maintaining your agenda, since that is the service you signed up for; consent for analytics cookies, which you can give or refuse without losing any functionality; and legitimate interests for keeping the service secure and preventing abuse.

People who email you

Your inbox contains other people's personal information. When Agenta processes a message someone sent you, we handle their name, address, and words too, they have no account with us and never agreed to anything. We rely on legitimate interests for this and process only what is needed to provide your agenda and writing assistance. We do not create advertising profiles, market to senders, or make hidden personality or sensitivity judgements. During a scan, Agenta may propose a small, explicit fact such as a preferred name, role, organisation, working relationship, or communication preference. Agenta is instructed not to propose task deadlines, private gossip, or inferred personality. Deterministic checks also block common credential, financial-identifier, health, sensitive-trait, and precise home-address patterns before a suggestion is stored. The proposal remains reviewable and unused until you accept it. Senders have the same rights listed below and can contact us directly.

Who else sees your data

We do not sell your personal information, and we do not share it for advertising. We use these service providers:

Google user data

Agenta's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we use Gmail and Calendar data only to provide the features you can see in Agenta, we do not transfer it except as needed to provide those features or as required by law, we do not use it for advertising, and we do not use it to train or improve any generalised AI model. Content is sent to OpenAI under terms that prohibit using it for model training, in three cases only: message text when you run a scan, including to identify reviewable context suggestions; the sender, subject and preview of a message when you have switched AI sorting on; and your instruction, the message you are replying to, and the saved context you choose to use when you ask it to draft an email. No human at Agenta reads your email except where you specifically ask us to investigate a problem.

International transfers

We are based in Australia and some providers process data in the United States. Where data protected by the GDPR leaves the EEA, that transfer relies on the European Commission's Standard Contractual Clauses in our agreements with those providers.

How long we keep it

Tasks and their attached message context are kept until you delete them or delete your account. Drafts are deleted the moment you send them, and otherwise stay until you delete them. Sorting rules and your written sorting context are kept until you change them; cached sorting decisions are discarded whenever you edit those rules or correct a decision, since a verdict from old instructions is worse than none. Person, workspace, and relationship context is kept until you clear it or delete your account. Pending, accepted, and dismissed context suggestions stay with the related person until account deletion; dismissed suggestions are retained only so Agenta does not repeatedly propose the same fact. Connected-account credentials are deleted when you disconnect that account. Deleting your account removes Agenta-owned data within 30 days, except where we must retain something to meet a legal obligation. Aggregated usage counts that cannot identify you may be kept longer.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another provider. You can delete your account and its data yourself from Settings at any time, and disconnect any mailbox without deleting your account. To make any other request, contact admin@helloagenta.com. We respond within 30 days and will not charge you or degrade your service for asking.

If you are in the EU or UK, you may complain to your national supervisory authority. In Australia, you may complain to the Office of the Australian Information Commissioner. We would appreciate the chance to fix it first.

US state privacy rights

If you live in a US state with a consumer privacy law, you have rights to know, delete, correct, and opt out of sale or targeted advertising. Agenta does not sell personal information or share it for cross-context behavioural advertising, so there is nothing to opt out of. Exercise the other rights through the contact address above.

Cookies

We set only strictly necessary cookies unless you accept analytics. See the Cookie Policy for the full list and to change your choice.

Security

Credentials are encrypted at rest, data is encrypted in transit, and access is enforced by row-level rules. See Security. If a breach affects your rights we will notify you and the relevant regulator as required by law.

Children

Agenta is not intended for anyone under 16, and we do not knowingly collect their data.

Changes

We will update this page when our practices change and revise the date above. If a change materially affects your rights we will tell you in the app before it takes effect.

Alpha notice

Agenta is currently an alpha product. Avoid connecting regulated, highly sensitive, or business-critical accounts until the security and retention controls have been independently reviewed.