Data and security

How AutoAGI handles your data

What AutoAGI stores, who touches it, and what you control. This page summarizes the published privacy policy in plain language and links to it.

The short answer

AutoAGI stores your account, conversations, uploaded files and generated work in Supabase, and sends your prompts, relevant history and files to the AI providers needed to complete each request. Those providers process content under their own policies, so AutoAGI does not promise anything on their behalf. You can edit your profile, export your data, manage billing in Stripe and request deletion at support@agilayer.com.

What AutoAGI stores

  • Your account email, the profile information you choose to provide, and membership and billing references.
  • Conversations, uploaded files, generated work and task activity, kept so you can return to them.
  • Model usage and operating costs, recorded to enforce your weekly allowance and run the service.
  • Billing references from Stripe rather than full payment-card numbers.

Account access controls separate members' conversations and files. Selected prior conversation excerpts, saved business context and knowledge files can be reused in later requests so tasks start with what AutoAGI already knows about you. Authorized service operations and support may access data when needed to operate, secure or troubleshoot the service.

Who processes your requests

To complete a request, your prompt, the relevant conversation history, saved business context and any attached or knowledge-base files may go to AI providers. Depending on the feature, that means OpenRouter and its model providers, TypeSafe for Jev, OpenAI voice services, or Harness Router agent workspaces for Cloud Harness runs.

Those providers process submitted content under their own applicable policies. AutoAGI therefore does not make promises about their handling of your data. The policy asks you to avoid submitting information you are not authorized to share.

ProviderUsed for
SupabaseAccounts and private workspace data
VercelHosting the application
StripeSubscriptions and payments
ResendAuthentication and service emails, and contact-form messages
OpenRouter and its model providersDrafting answers and completing requests
TypeSafe (Jev)Jev analysis and estimating task complexity
Harness RouterCloud Harness agent workspaces
ComposioSecure sign-in to connected apps

How connected apps stay safe

You sign in to each app on its own page through Composio, and your app password never enters AutoAGI. Every connection has a policy you set: fully autonomous or read only, with deletions and mass sends off until you turn them on, and an optional scope such as the repositories or channels it may touch.

Scheduled routines carry a snapshot of the connections they were saved with, and disconnecting an app removes it from every routine at once. Cloud Harness runs use your apps through the AutoAGI gateway and never hold a provider token. Every call is logged, and you can disconnect at any time.

Your controls

  • Edit your profile and task-email preferences in Account.
  • Export your account data.
  • Manage or cancel your subscription through the Stripe billing portal.
  • Email support@agilayer.com to request account or data deletion. Records needed for billing, security, disputes or legal obligations may be retained, and backup copies and provider records follow their own retention processes.
  • Google sign-in requests only your basic identity: name, email and profile picture. It does not give AutoAGI access to your Gmail, Drive or Calendar.

What we do not claim

AutoAGI does not claim compliance certifications, regional data residency or on-premise hosting. It does not promise how third-party model providers treat submitted content. If your work needs any of those, ask before you submit it.

Questions

Does AutoAGI train AI models on my data?
The published privacy policy describes no use of your content to train models. Your requests are processed by third-party AI providers under their own applicable policies, so review those policies for anything sensitive, and avoid submitting information you are not authorized to share.
Where is my data stored?
Accounts and private workspace data are stored in Supabase, and the application is hosted on Vercel. AutoAGI does not offer a choice of data region.
Can I delete my data?
Yes. Email support@agilayer.com to request account or data deletion. Billing, security and legal records may be retained, and provider backups follow their own retention processes.
Can AutoAGI read my Gmail or Google Drive because I signed in with Google?
No. Google sign-in gives AutoAGI your name, email and profile picture only. Access to any app is a separate connection that you approve on the app's own page and can scope or disconnect.
Are connected apps read only?
You choose. Each connection is fully autonomous or read only, deletions and mass sends stay off until you turn them on, and you can limit a connection to specific repositories or channels.
Where is the full policy?
The privacy policy is at auto.agilayer.com/privacy. It was last updated September 25, 2026.

Sources