Privacy policy
Last updated: October 3, 2026
This policy explains what personal data AgenBase ("we", "us") collects, why, and what your choices are. It covers our website, our app, and the chatbot widget that our customers place on their own websites.
Two roles
- For account holders (our customers) we are the data controller. We handle your account, billing and usage data.
- For visitors who chat with a customer's chatbot we act as a processor on that customer's behalf. The customer decides why and how the conversation data is used, and is responsible for telling its visitors about it. If you are a visitor and want to access or delete your data, please contact the website owner first.
What we collect
- Account data: name, email address, password (stored hashed), sign-in method, and organization membership.
- Billing data: handled by Polar, our payment provider and merchant of record. We receive your plan, subscription status and a customer identifier, not your card number.
- Customer content: documents, web pages and text you upload, and the settings of your chatbots.
- Conversation data: messages visitors send to your chatbot and its replies, the page address where the chat took place, an anonymous visitor identifier stored in the visitor's browser, and any name or email a visitor chooses to leave.
- Usage and technical data: message counts, IP address, browser type, and error logs, used to run, secure and bill the service.
How we use it
To provide and secure the service, answer questions with your content, bill usage, send account and service emails, prevent abuse, and improve the product. We do not sell personal data. We do not use customer content or conversations to train AI models.
Service providers
We share data only with providers that help us run AgenBase, under agreements that require them to protect it:
- OpenAI processes chatbot questions and document text to generate answers and embeddings. Under OpenAI's API terms, API data is not used to train its models.
- Supabase hosts our database and file storage (European region).
- Vercel hosts the website and app.
- Polar processes payments and subscriptions.
- Resend sends transactional emails.
International transfers
Some providers process data outside your country, including in the United States. Where required, transfers rely on safeguards such as standard contractual clauses.
Retention
We keep account data while your account is active. Conversations and uploaded content are kept until you delete them or close your account, after which we delete them within a reasonable period. We may keep limited records for legal, tax and security reasons.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict some processing, and to complain to your data protection authority. You can delete chatbots, sources and your account in the app. For anything else, contact us through the contact page.
Cookies
We use essential cookies for sign-in and security. The chat widget stores an anonymous visitor identifier in the browser's local storage so a visitor can continue a conversation. We do not use advertising cookies.
Security
We use encryption in transit, access controls, and database-level protections. No system is perfectly secure, so please use a strong, unique password and enable two-factor authentication.
Children
AgenBase is not directed at children under 16, and we do not knowingly collect their data.
Changes
We may update this policy. If a change is significant we will notify you by email or in the app.
Contact
Questions about privacy? Reach us through the contact page on our website.