Privacy Policy

AgentRealm is provided by Omnivector Labs, an independent venture operated by Dinu Madapatha, based in Colorado, United States ("we", "us"). Omnivector Labs is not affiliated with any employer of its operator. For any privacy question or request, email support@agentrealm.io.

• Account information. Your email address, an internal account ID, and when you signed up and last signed in. We use your email to send one-time sign-in codes and links. We do not ask for your name, phone number, or a password.
• Workspace content you enter. Your workspace name, agent names, platform labels, check-in schedules, robot avatars, and your alert and question settings.
• Content your agents send. Check-in titles, messages, statuses, optional numbers, and optional links, plus questions your agents ask and the answers you give (including which member answered and their email). You decide what your agents send. Please do not have them send passwords, payment card numbers, health information, or other sensitive personal information.
• Agent keys. We store a one-way hash and a short prefix of each key, when it was created, and when it was last used. We never store the full secret after showing it to you once. We keep short-lived request counts per key to prevent abuse.
• Billing information. If you choose a paid plan, we store your plan, your Stripe customer and subscription IDs, the subscription status, and the renewal date. Stripe collects and stores your payment card details. We never see or store your full card number.
• iPhone alert tokens. Only if you tap "Turn on iPhone alerts" and allow notifications, we store a push token for that device, a device name, and when it was last seen, so we can send alerts about your agents.
• Alert records. When a scheduled agent goes quiet, we keep a record of the alert and whether the alert email or push was sent.
• Support messages. If you email us, we receive your email address and whatever you include in the message.
• Technical data. Our hosting providers automatically log requests (for example IP address, browser or device type, the page or API route requested, and the time) to run, secure, and debug the service. We use only the cookies needed to keep you signed in. We do not use advertising cookies, analytics trackers, or advertising IDs.

We do not collect your location, contacts, photos, health data, or browsing history, and we do not buy information about you from others.

We use the information above only to: provide and operate AgentRealm (sign-in, your hub, agent keys, questions, and alerts); enforce plan limits and process payments you choose to make; send service emails such as sign-in codes, alerts you have turned on, and important notices about your account; respond to support requests; keep the service secure and prevent abuse; and meet legal obligations.

We do not sell your personal information, we do not share it for cross-context behavioral advertising, we do not use it to track you across other companies' apps or websites, and we do not use your workspace content to train AI models. We do not send marketing email without your permission.

These companies process information on our behalf, under contracts that limit their use of it to providing their service to us:

• Supabase: database and sign-in (all account and workspace data). Hosted in the United States.
• Vercel: website and API hosting, and request logs.
• Resend: sending sign-in and alert emails, and receiving email sent to our support address.
• Google (Gmail): the mailbox where support emails are read and answered.
• Stripe: payments and subscription billing for paid plans.
• Expo and Apple: delivering iPhone push alerts (Expo's push service relays alerts to Apple Push Notification service). Apple also distributes the iPhone app through the App Store and TestFlight under its own privacy policy.

We may also disclose information if required by law, to protect the rights, safety, or security of our users or the service, or as part of a sale or reorganization of AgentRealm, in which case this policy will continue to apply to your information.

• Account, workspace, agent, check-in, question, and alert data: for as long as your account exists. You can archive agents and revoke keys at any time.
• When you delete your account: your sign-in, push tokens, and memberships are deleted right away, and so is any workspace where you were the only member, with all of its agents, keys, check-ins, questions, and alerts. Copies in our database provider's encrypted backups are overwritten on their normal schedule, within 30 days.
• Push tokens: until you turn off alerts, the token stops working, or you delete your account.
• Request counts used for rate limiting: short-lived, and deleted with the key.
• Hosting and email delivery logs: generally 30 days or less, under our providers' standard retention.
• Support emails: up to 2 years after the conversation ends, unless you ask us to delete them sooner.
• Billing and tax records (for example Stripe invoices): as long as tax and accounting law requires, typically up to 7 years, even after you delete your account.

Sign in, open Account, and choose Delete this account. This works in the website and inside the iPhone app. If you have a paid plan, we cancel the subscription first. You can also email support@agentrealm.io from the email address on the account and we will delete it within 30 days.

Wherever you live, you can ask us to: confirm whether we process your personal information; access it or get a portable copy; correct it; or delete it. You can also opt out of the sale of personal information, targeted advertising, and profiling. We do not do any of those, and we treat a Global Privacy Control signal as a valid opt-out. Residents of California (CCPA/CPRA), Colorado (Colorado Privacy Act), and other states with privacy laws have these rights under those laws.

To make a request, email support@agentrealm.io. We will verify the request by confirming it with the email address on the account, and respond within 45 days (we will tell you if we need up to 45 more days). You may use an authorized agent, and we may ask that agent for proof of your permission. We will not discriminate against you for using these rights.

If we decline your request, you can appeal by replying with "Appeal" in the subject line. We will respond to an appeal within 45 days. If you are a Colorado resident and disagree with our decision on appeal, you may contact the Colorado Attorney General at coag.gov.

California notice: in the past 12 months we collected the categories of personal information described above (identifiers such as email address and account ID; commercial information such as plan and subscription records; internet or network activity such as request logs; and the content you and your agents submit). We collected them from you, your agents, and your devices, for the purposes described in "How we use information," and disclosed them only to the service providers listed above. We have not sold or shared personal information, and we do not use sensitive personal information to infer characteristics about you.

AgentRealm is not directed to children, and you must be at least 13 years old to use it. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us information, email support@agentrealm.io and we will delete it.

We use encryption in transit (HTTPS), hashed agent keys, database row-level security so each workspace can read only its own data, and limited, audited access to production systems. No system is perfectly secure. If we learn of a breach that affects your personal information, we will notify you as required by law.

AgentRealm is operated from the United States, and your information is stored and processed in the United States. If you use AgentRealm from outside the United States, you understand that your information will be transferred there.

If we change this policy, we will post the new version here and update the effective date. If a change is significant, we will also notify you by email or in the app before it takes effect.

Omnivector Labs, an independent venture operated by Dinu Madapatha. Email support@agentrealm.io. See also our Terms of Service and Support page.