Privacy Policy

Overview

This Privacy Policy explains how AI Agent Ecosystem (https://www.agentelio.xyz) handles data. AI Agent Ecosystem is a private tool operated by a single administrator. Only the administrator's account is authorized to use the dashboard; any other account that signs in is denied access.

Data we access and why

Google sign-in

Sign-in uses Google. When you sign in, we receive your basic Google profile: name, email address, whether the email address is verified, and profile picture. We use this only to create your session and to check whether your account is the authorized administrator. If it is not, you are denied access.

Gmail: sending (gmail.send)

The administrator may connect their own Gmail account with the gmail.send scope. It is used only to send outreach emails that the administrator has reviewed and approved in the app. We store the message identifier Gmail returns, so the app can record that an email was sent. The app does not read, modify or delete any email in the mailbox. Sending is disabled unless the administrator deliberately enables it.

Business leads

The app finds businesses through a web search service and by fetching the public homepage of a business website. It stores business details found this way, such as company name, website, and public contact information, along with measurable website signals used for scoring.

How Google user data is used

• Google user data is used only to provide the features described above, for the administrator.
• We do not sell Google user data or use it for advertising.
• We do not use Google user data to train AI or machine-learning models.

AI Agent Ecosystem's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Storage and service providers

We do not sell or share data with third parties for their own purposes. Data is processed by these service providers only to run the app:

• Neon: database hosting and authentication (sessions and the signed-in user record).
• Vercel: application hosting.
• Google: sign-in and the Gmail API.
• Tavily: web search used to find businesses. Search queries are sent; Gmail data is not.

Data may also be disclosed if required by law.

Retention and deletion

• Lead and outreach records are kept while the administrator needs them for their workflows, and can be deleted on request.
• Gmail access tokens are short-lived, are kept only in memory while a request runs, and are never stored in the database.
• The administrator can revoke the app's Google access at any time at myaccount.google.com/permissions. After that, the app can no longer send email.
• If you are a contact who received an outreach email and want your data deleted, email us and we will delete it.

Security

• All traffic uses HTTPS.
• Only the administrator's verified Google account can access the dashboard and its data.
• OAuth credentials are kept in server-side configuration and are never sent to the browser or written to logs.
• Gmail access is limited to the gmail.send scope described above.

No system is perfectly secure, but we work to protect data against unauthorized access.

Changes

If this policy changes, the updated version will be posted on this page with a new date.

Contact

Questions or deletion requests: webformakontakt@gmail.com