1. Overview
This Privacy Policy explains what personal data PlusAgents (“PlusAgents”, “we”, “us”) collects when you use plusagents.ai and our hosting service (the “Service”), how we use it, who we share it with, and the rights you have over it. PlusAgents is the data controller for the personal data described here.
2. Data we collect
Account data. Your email address, name if you provide one, password hash, and plan details.
Billing data. Handled by our payment processor. We receive your plan, payment status, country, and the last four digits and brand of your card, never the full card number.
Agent instance data. Everything your agent stores to work for you: conversations, memory, files, skills and configuration, including credentials for chat apps you connect. This lives in your isolated instance.
Usage and technical data. Logs and metrics we need to operate the platform: instance health, resource usage, LLM credit consumption, IP addresses, browser type, and pages visited on our website.
Support data. Messages you send us by email or Discord, and the context needed to help you.
3. How we use your data
- To provide the Service: running your agent, connecting your chat apps, storing your data, metering credits.
- To bill you: processing payments, preventing fraud, keeping tax records.
- To keep things working and safe: monitoring, debugging, abuse prevention, securing our infrastructure.
- To communicate: service emails about your agent, billing and important changes; product updates you can opt out of.
- To improve the Service: aggregate, de-identified analytics about how the platform is used.
Where GDPR or similar laws apply, our legal bases are performance of our contract with you, our legitimate interests in operating and securing the Service, compliance with legal obligations, and your consent where we ask for it.
4. AI models and your agent's conversations
When your agent thinks, it sends the relevant conversation context to AI model providers to generate a response. This happens under our agreements with those providers when you use included LLM credits, or under your own provider agreement when you bring your own API keys.
- We do not use your agent’s conversations to train AI models.
- Our provider agreements require that your prompts are not used to train their models either.
- We do not read your agent’s conversations except when you explicitly share them with support, or in narrowly scoped, logged cases where it is strictly necessary to investigate abuse, security incidents or legal requirements.
5. Chat platforms you connect
Connecting WhatsApp, Telegram, Discord, Slack or another platform means messages from those platforms flow into your agent instance so it can reply. Those platforms process your messages under their own privacy policies, which we encourage you to read. We store the connection credentials in your instance and use them only to operate the integration you set up.
7. How long we keep data
- Agent instance data: kept while your agent exists. Deleted 30 days after you delete the agent or your account, backups included.
- Account data: kept while your account is active, deleted 30 days after account deletion.
- Billing records: kept as long as tax and accounting laws require, typically 7 years.
- Server logs: kept up to 90 days, then deleted or de-identified.
8. Security
Every agent runs in its own isolated instance with dedicated resources. Data is encrypted in transit (TLS) and at rest. Access to production systems is restricted to authorized personnel, protected by multi-factor authentication, and logged. No system is perfectly secure, but if we learn of a breach affecting your personal data we will notify you and the relevant authorities as required by law.
9. Your rights
Depending on where you live (including under the GDPR, UK GDPR and the California Consumer Privacy Act), you may have the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- delete your data;
- receive a portable copy of your data;
- object to or restrict certain processing, and withdraw consent where processing is based on consent;
- complain to your local data protection authority.
Much of this is self-serve: you can export your agent’s data and delete your agent or account from the dashboard. For anything else, email [email protected] and we will respond within 30 days. We do not discriminate against you for exercising your rights.
10. International transfers
Our infrastructure providers operate data centers in several countries, so your data may be processed outside your own. Where data moves out of the European Economic Area, the UK or Switzerland, we rely on adequacy decisions or standard contractual clauses to protect it.
12. Children
The Service is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has created an account, contact us at [email protected] and we will delete it.
13. Changes to this policy
We may update this policy as the Service evolves. For material changes we will notify you by email or in the dashboard before they take effect, and the “Last updated” date above always reflects the current version.
14. Contact
Privacy questions and rights requests: [email protected]. Anything else: [email protected].