Privacy Policy
Effective
This Privacy Policy explains how HireNinja LLC, a Delaware limited liability company ("AgentFront", "we", "us" or "our"), collects, uses, shares and protects personal information when you visit agentfront.me, use the AgentFront studio, or use an AI agent storefront hosted on AgentFront (together, the "Service").
AgentFront lets independent creators build AI agents and sell access to them through their own storefronts. That means we handle information about three groups of people: visitors to our website, creators who build and sell agents, and customers who sign up for and chat with a creator's agent. This policy explains what applies to each.
Capitalized terms not defined here have the meaning given in our Terms of Service.
1. Our role and the creator's role
For information about visitors and creators, and for information we use to run, secure and improve the Service, AgentFront is the controller (or "business"): we decide how and why that information is processed.
For information a customer provides while using a creator's agent (for example, sign-up details, chat messages, files and data from accounts the customer connects), the creator is the controller and AgentFront acts as the creator's processor (or "service provider"). We process that information on the creator's behalf and according to their instructions, our Terms and applicable law. Each creator is responsible for their own privacy notice to their customers. If you are a customer, please also read the privacy policy of the agent you use, and direct privacy requests about that agent to its creator first.
We still act as a controller for limited customer information that we need for our own purposes, such as keeping the Service secure, preventing fraud and abuse, enforcing our Terms and meeting legal obligations.
2. Information we collect
Information you give us
- Account information: name, email address, password (stored only as a salted hash), business name and account settings.
- Creator content: agent names, descriptions, instructions and system prompts, storefront pages, blog posts, pricing, images, and documents or URLs added to an agent's knowledge base.
- Conversations: messages, files and images sent to an agent, the agent's replies, feedback such as thumbs up or down, and the records of actions an agent takes during a conversation.
- Credentials you provide: AI model provider API keys and payment account keys that creators enter. We encrypt these at rest, use them only to operate the features you enabled, and never show them again after entry.
- Business and verification information: for creators, information about your business, the products you sell and your payment account, which we use to check eligibility and compliance with our Prohibited Businesses list.
- Communications: messages you send us, early-access and waitlist sign-ups, support requests, survey responses and abuse reports.
Information from connected accounts
When you connect a third-party account to AgentFront (for example Shopify, Slack, Google Workspace or a remote tool server), we receive an access token and the information that the connection permits, such as store orders, messages or documents, only to the extent needed for the agent to perform the tasks you ask for. We store tokens encrypted, and you can disconnect at any time. See "Data from connected accounts" below.
Payment information
Payments on AgentFront are handled by third-party payment processors. When you pay for a creator plan, or a customer pays a creator for access to an agent, card and bank details are collected directly by the payment processor, not by AgentFront, and are governed by that processor's privacy policy. We receive limited information such as the payment status, amount, currency, plan, the last four digits and brand of the card, and billing country, and creators may see similar details about their own customers. Payment processors may also collect device and transaction information to prevent fraud and to comply with law and card network rules.
Information collected automatically
- Usage and log data: pages and features used, actions taken, timestamps, errors, and model usage such as token counts.
- Device and network data: IP address, browser type, operating system, referring URL and approximate location derived from IP address.
- Cookies: see "Cookies" below.
3. How we use information
We use personal information to:
- provide, host and operate the Service, including running agents, storing conversations, and publishing storefronts;
- send messages to the AI model provider selected by the creator so the agent can respond, and to our own model providers for platform features such as drafting a storefront;
- create and secure accounts, authenticate users and remember sessions;
- process creator plan payments and let creators charge their customers through their own payment accounts;
- review creators, agents and storefronts for compliance with our Terms, Acceptable Use rules and Prohibited Businesses list, and to detect and prevent fraud, abuse, spam and security incidents;
- provide support, respond to requests and send service messages such as receipts, security alerts and changes to our terms;
- send product updates and marketing emails, which you can opt out of at any time;
- understand how the Service is used and improve it, using aggregated or de-identified information where we can; and
- comply with law, enforce our agreements, and protect the rights, property and safety of our users, the public and AgentFront.
No model training on your content. We do not use creator content, customer conversations, or data from connected accounts to train our own or third-party foundation models.
No sale of personal information. We do not sell personal information, and we do not share it for cross-context behavioral advertising.
4. Legal bases (EEA, UK and Switzerland)
Where the GDPR or similar law applies, we rely on these legal bases:
- Contract: to provide the Service you asked for and manage your account.
- Legitimate interests: to secure and improve the Service, prevent fraud and abuse, enforce our terms and communicate with creators about their business, where those interests are not overridden by your rights.
- Consent: for optional marketing emails and non-essential cookies, which you may withdraw at any time.
- Legal obligation: to meet tax, accounting, sanctions and other legal requirements.
6. Data from connected accounts
We use data obtained through a connected account only to provide the features you requested in that conversation or agent, request the minimum permissions needed, and never sell it or use it for advertising. Tokens are encrypted and are used only in conversations belonging to the person who authorized them. Write actions on your account ask for your confirmation unless the creator or you have chosen otherwise.
AgentFront's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can revoke access at any time from your account settings or from the third-party service itself.
8. How long we keep information
We keep personal information for as long as your account is active or as needed to provide the Service. After you close your account, we delete or de-identify your information within 90 days, except where we need to keep it longer to comply with legal, tax or accounting obligations, resolve disputes, prevent fraud and abuse, or enforce our agreements. Backups are overwritten on a rolling schedule.
Customer information that we process for a creator is kept according to the creator's instructions, and deleted when the creator deletes it or closes their account, subject to the same exceptions.
9. Security
We use administrative, technical and physical safeguards designed to protect personal information, including encryption in transit and at rest, encryption of API keys and access tokens, tenant isolation between agents and creators, access controls and audit logging. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a security incident that affects your personal information, we will notify you and the relevant authorities as required by law.
10. International transfers
AgentFront is based in the United States and our service providers operate around the world. Your information may be processed in countries other than your own, including the United States. Where required, we protect transfers with appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.
11. Your rights and choices
Depending on where you live, you may have the right to:
- access the personal information we hold about you and receive a copy in a portable format;
- correct inaccurate information;
- delete your information;
- object to or restrict certain processing, and withdraw consent where we rely on it;
- opt out of the sale or sharing of personal information or targeted advertising (we do neither); and
- not be discriminated against for exercising these rights.
To exercise these rights, email support@agentfront.me or use the controls in your account. We will verify your request and respond within the time required by law. You may use an authorized agent where the law allows. If we deny your request, you may appeal by replying to our decision, and you can complain to your local data protection authority.
If you are a customer of a creator's agent, we will forward requests about that agent's data to the creator, who is responsible for responding, and we will help them do so.
You can unsubscribe from marketing emails using the link in any email. You will still receive service messages about your account.
12. Children
The Service is not directed to children. You must be at least 18 years old, or the age of majority where you live, to create an account. We do not knowingly collect personal information from children under 16. If you believe a child has given us personal information, contact us and we will delete it.
13. Changes to this policy
We may update this policy from time to time. We will post the new version here and change the effective date above. If a change is material, we will give you notice by email or in the Service before it takes effect.
14. Contact us
Questions or requests about privacy: support@agentfront.me.
HireNinja LLC, a Delaware limited liability company, operating AgentFront.