Privacy Policy
Last updated: March 20, 2025
1. Overview
Agent3 ("we", "us", "our") operates the Agent3 platform, which provides personal AI scheduling agents accessible at agent3.me. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.
By using Agent3 — whether as an account holder or as a visitor interacting with someone else's agent — you agree to the practices described in this policy.
2. Information We Collect
2.1 Account Holders
- Name and email address (provided at registration or via Google OAuth)
- Agent name and profile information (display name, bio, avatar)
- Google Calendar data: event titles, times, attendees, and free/busy status — only with your explicit OAuth consent
- Agent configuration: working hours, meeting preferences, scheduling rules
- Conversation history between you and your agent
2.2 Visitors
- Messages sent to an agent during a chat session
- Name and email provided when booking a meeting
- Session identifiers stored in your browser (localStorage) to maintain conversation continuity
2.3 Automatically Collected
- Basic server logs (IP address, browser type, pages visited) for security and debugging
- No advertising tracking pixels or third-party analytics
3. How We Use Your Information
- To operate the service: authenticate users, power your AI agent, check calendar availability, and create/cancel bookings
- To communicate with you: booking confirmations, cancellation notices, and service updates
- To improve the product: understanding usage patterns to fix bugs and build new features (aggregate data only, no individual profiling)
- To comply with legal obligations
We do not sell your personal information to third parties. We do not use your calendar data or conversation history to train AI models.
4. Third-Party Services
Agent3 relies on the following third-party services to operate:
Google (OAuth & Calendar API)
Used for account sign-in and calendar access. Google's use of your data is governed by Google's Privacy Policy. We request only the minimum necessary scopes.
Supabase
Our database and authentication provider. Your data is stored in Supabase-managed infrastructure. See Supabase's Privacy Policy.
Vercel
Our hosting and deployment platform. See Vercel's Privacy Policy.
AI Language Model Providers
Chat messages are processed by AI model providers (currently via OpenRouter) to generate agent responses. Messages may include context from your conversation. We do not send calendar event details to AI providers unless directly relevant to answering a question.
5. Calendar Data
We access your Google Calendar only after you grant explicit OAuth permission. We use this access to:
- Check your availability when visitors request to book time
- Create calendar events when meetings are confirmed
- Show you a summary of upcoming events in your agent dashboard
Visitors who interact with your agent see only free/busy information by default. They do not see event titles, descriptions, or attendees unless you explicitly configure your agent to share that information.
You can revoke calendar access at any time via your Google account permissions.
6. Data Retention
- Account data is retained until you delete your account
- Conversation history is retained to provide continuity; you can request deletion
- Booking records are retained for 12 months for dispute resolution
- Upon account deletion, we remove your personal data within 30 days, except where required by law
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Export your data in a portable format
- Withdraw consent for calendar access at any time
To exercise these rights, contact us at privacy@agent3.me.
8. Security
We use industry-standard security measures including HTTPS encryption, secure authentication via Supabase, and access controls that limit which parts of your data each component of the system can read. However, no system is 100% secure. We encourage you to use a strong, unique password and to notify us immediately if you suspect unauthorized access.
9. Children's Privacy
Agent3 is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their information, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this policy as the product evolves. We'll notify account holders of material changes by email or via an in-app notice at least 14 days before the change takes effect. Continued use after that date constitutes acceptance.
11. Contact
Questions or concerns about this policy? Reach us at:
privacy@agent3.me