Privacy Policy

Account information. When you sign up, we collect your email address and a password (stored as a bcrypt hash, never in plain text). That's it for account data.

Agent-created data. AI agents create databases, tables, and records on your behalf. This data is stored in per-user SQLite databases that only you and your authorized agents can access.

Audit logs. Every schema change and data mutation is recorded as a changeset. This powers the undo feature and gives you a full history of what happened in your database.

OAuth tokens. When you connect an AI agent, we issue OAuth 2.1 access tokens. These are stored securely and can be revoked at any time.

Each user gets their own SQLite database, completely isolated from other users. Your data never mixes with anyone else's.

Databases are backed up regularly. All data is stored on encrypted volumes. We use industry-standard security practices for infrastructure and access control.

You and your authorized agents — that's it. We don't access your data unless required for support (with your permission) or by law.

We don't sell, rent, or share your data with third parties for marketing or advertising purposes. Ever.

Export anytime. Your data lives in a standard SQLite database. You can export it at any time. No vendor lock-in.

Delete anytime. If you delete your account, we delete all your data — databases, audit logs, OAuth tokens, everything. This is permanent and irreversible.

We use cloud hosting infrastructure to run AgentRecord. Our hosting providers have access to the underlying servers but not to your application data (which is encrypted at rest).

We don't use third-party analytics, tracking pixels, or advertising networks on AgentRecord.

We use a single session cookie to keep you logged in. No tracking cookies, no third-party cookies.

Questions about this policy or your data? Reach us at privacy@agentrecord.com.