Privacy Policy

1. Information We Collect

As an automation bridge, Agency OS is designed to process data, not horde it. We collect only what is strictly necessary to run your automated pipelines:

• Account Data: Email addresses and secure passwords used for platform authentication.
• Integration Credentials: Third-party API tokens (e.g., ClickUp) and Webhook URLs (e.g., Slack).
• Transient Payload Data: The lead information (names, emails, companies) passed through your custom webhooks is processed in real-time.

2. Military-Grade Data Security

We do not compromise on security. All sensitive integration data (including your ClickUp API tokens) is encrypted at rest using industry-standard protocols. Account passwords are cryptographically hashed using Bcrypt.

Agency OS does not have direct access to read your plain-text passwords, ensuring absolute privacy from internal and external threats.

3. Cryptocurrency & Financial Privacy

To maximize financial privacy, we utilize NOWPayments as our exclusive cryptocurrency payment gateway.

• Agency OS does not collect, process, or store your private keys, wallet addresses, or fiat banking information.
• All billing transactions are verified securely on the blockchain.

4. Third-Party Data Sharing

We do not sell, rent, or trade your data. The only time data leaves our secure servers is during the explicit execution of your automated workflows:

When a webhook is triggered, we securely transmit the formatted payload directly to your connected third-party platforms (ClickUp and Slack). We strongly advise reviewing the privacy policies of Zapier, Make.com, GoHighLevel, ClickUp, and Slack to understand how they handle your data post-transmission.

5. Data Retention & Deletion

We operate on a principle of data minimization. Transient webhook logs are kept for a limited period solely for error-tracking and operational metrics (e.g., calculating your daily plan limits).

If you choose to delete your Agency OS account, all associated databases, tokens, and routing configurations will be permanently and irreversibly destroyed from our active servers.

6. Contacting the Privacy Team

If you have questions regarding our data practices, GDPR compliance, or wish to execute a data deletion request, our global support team is available.