Privacy Policy
Effective September 6, 2026. Granato Co. LLC, doing business as AGENTSA, 13423 Blanco Rd #966, San Antonio, TX 78216. Questions: hello@agentsa.ai.
This policy explains what we collect, why, and who sees it. It covers AGENTSA at app.agentsa.ai, this website, and the Second Shift newsletter.
1. What we collect
- Your profile name and email address when you create a profile, sign in, subscribe, or buy credits.
- Conversations, saved requests and progress, plan and credit balances, credit usage records, offices, teammates, inbox items, run history, and files or notes you add in AGENTSA.
- If you use a cloud computer, its files, browser profile and signed-in sessions are saved with that computer. Bot workspaces in the same account share these files and browser sessions. Desktop screenshots are sent through AGENTSA for live viewing and, when a bot observes the screen, to its AI provider. Approved computer actions and their results are recorded with your work.
- Connections you make to other services (for example Salesforce, Microsoft 365, Gmail, HubSpot). We store tokens and keys in encrypted form. Employees do not see those secrets.
- Payment details handled by Stripe. We keep customer, checkout, payment, subscription and refund records needed to add credits, account for usage, and resolve billing questions. We do not store your full card number.
- Technical basics: IP address, browser, and timestamps, used to run the service and stop abuse.
- Newsletter and contact form submissions on agentsa.ai.
2. Why we use it
To run your profile, send sign-in links, process payments and credits, show conversations and saved work, run the teammates you choose, connect your tools, email you about your account, and improve the product. We send Second Shift only if you subscribed. We do not sell your information.
3. Who helps us
We use companies that process data for us, under their own terms:
- Cloudflare (site, app, and database).
- Stripe (payments).
- Resend (transactional email such as sign-in links).
- Anthropic (Claude models selected for each prepaid task). Existing legacy accounts may also use OpenAI if selected in their account. We share the requests and context needed to run the work with the relevant provider.
- E2B (hosting and saving your cloud computer, including its files and browser sessions).
- Composio and the providers you connect, only after you connect them.
If you connect Salesforce, Microsoft, Google, or another tool, that provider also sees the data you let AGENTSA read or send. Their policies apply there.
4. Cookies
AGENTSA uses a signed-in session cookie so you stay in your office. HQ (our owner desk) uses a separate short cookie. We do not use advertising cookies. Cloudflare may set a cookie for security or analytics on agentsa.ai.
5. How long we keep it
Account data stays while the account is open. Sign-in links expire in minutes. AGENTSA sessions last 14 days unless you sign out everywhere. After an account ends we may keep records needed for billing, security, or the law, then delete or anonymize the rest. Account deletion as a self-serve button is not in the app yet; email hello@agentsa.ai and we will remove what we can.
6. Your choices
You can disconnect a tool, sign out everywhere, rotate an employee key, cancel a plan, or unsubscribe from Second Shift. You can ask for a copy of your account data or ask us to delete it. Texas residents may have extra rights under Texas data law; email us to use them. We will not discriminate against you for asking.
7. Children
AGENTSA and this site are not for children under 13, and we do not knowingly collect information from them.
8. Security
We use HTTPS, hashed sign-in tokens, encrypted stored secrets, and access limits. No method is perfect. Tell us at hello@agentsa.ai if you think something is wrong with an account.
9. Changes
We may update this policy. The date at the top will change. The current version lives at agentsa.ai/privacy.
Related: Terms of Service.