1. Introduction

AgentK ("we," "our," or "us") operates the AgentK web application and associated services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

2. Information We Collect

2.1 Information You Provide

Account information: Email address, display name, and password (hashed) when you register with email/password.
OAuth profile data: If you sign in via Google, we receive your name and email address as provided by Google.
Monitoring configuration: Keywords, subreddits, and notification preferences you configure within the dashboard.
Telegram chat ID: If you connect a Telegram account, we store your Telegram chat ID to deliver alerts.
Discord channel ID: If you connect a Discord account, we store your Discord channel ID to deliver alerts.

2.2 Information Collected Automatically

Usage data: Pages visited, features used, and actions taken within the Service.
Device and browser information: IP address, browser type, operating system, and referring URLs, collected via standard web server logs.
Session tokens: Encrypted session cookies set after authentication to maintain your logged-in state.

2.3 Reddit Data

We access Reddit's public API to monitor posts in subreddits you specify. We do not store Reddit post content beyond what is required to evaluate keyword matches and deliver your alerts. We do not access or store any private Reddit user data.

3. How We Use Your Information

We use the information we collect to:

Create and manage your account and authenticate your identity.
Operate the keyword monitoring and alert delivery features you configure.
Send Telegram and/or Discord notifications when a matching Reddit post is detected.
Communicate service updates, security notices, or changes to this policy.
Diagnose technical issues, ensure service reliability, and improve performance.
Comply with applicable legal obligations.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Third-Party Services

We integrate with the following third-party services, each subject to their own privacy policies:

Convex (convex.dev): Our backend-as-a-service provider. Your data is stored on Convex infrastructure. See Convex Privacy Policy.
Google OAuth (accounts.google.com):Used for "Sign in with Google." We receive your name and email address. See Google Privacy Policy.
Telegram: Used to deliver post-match alerts to your Telegram account. Message delivery is handled via the Telegram Bot API.
Discord: Used to deliver post-match alerts to your Discord server or channel via the Discord Bot API.
Reddit API:Used to fetch public post data from subreddits you specify. We operate within Reddit's API terms of service.
Vercel: Our hosting provider. Network-level data (IP addresses, request logs) may be processed by Vercel. See Vercel Privacy Policy.

5. Cookies and Session Storage

We use HTTP-only, secure cookies to maintain authenticated sessions. These cookies are strictly necessary for the Service to function and do not track you across third-party websites. We do not use advertising or analytics cookies.

6. Data Retention

We retain your account data for as long as your account is active. Monitoring configurations and alert history are retained to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

7. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS), hashed password storage, RSA-signed JWT authentication tokens, and access controls on our backend infrastructure. However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your information.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

Access a copy of the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your account and associated personal data.
Object to or restrict certain processing activities.
Data portability (receive your data in a structured, machine-readable format).

To exercise any of these rights, contact us at privacy@agentk.io. We will respond within 30 days.

9. Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us personal information, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page and, where appropriate, by sending an email to the address associated with your account. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at:

AgentK

Email: privacy@agentk.io