Skip to content
← Back to Agent Craft

Privacy Policy

Last Updated: November 12, 2026

1. Introduction

Welcome to Agent Craft ("we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and mobile application (collectively, the "Service").

Contact Information:
Agent Craft
Email: privacy@agentcraft.ai

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, password (encrypted), and professional details (job role, industry, company size)
  • Voice Recordings: Audio recordings you create through our voice note feature, including the content of your spoken answers
  • Voice Transcripts: Text transcriptions of your voice recordings generated using AI technology
  • Content Preferences: Your choices about content style, tone, topics, and platform preferences
  • Payment Information: Credit card details and billing information (processed securely by Stripe)
  • Connected Account Data: If you connect social media accounts, we collect profile information necessary for content publishing

2.2 Automatically Collected Information

  • Usage Data: How you interact with our Service, including pages visited, features used, and time spent
  • Device Information: Device type, operating system, browser type, IP address, and unique device identifiers
  • Log Data: Server logs, error reports, and performance metrics
  • Session Information: Authentication tokens and session identifiers

3. How We Use Your Information

We use your information for the following purposes:

  • Service Delivery: To provide, operate, and maintain our Service, including voice transcription and AI-powered content generation
  • AI Content Generation: To analyze your voice recordings and transcripts to generate personalized content tailored to your professional brand across all supported channels
  • Learning & Improvement: To improve our AI algorithms and content quality based on your feedback and usage patterns
  • Account Management: To create and manage your account, process payments, and handle subscriptions
  • Communication: To send you service updates, notifications, and customer support responses
  • Security: To detect, prevent, and address technical issues, fraud, and security incidents
  • Analytics: To understand how users interact with our Service and improve user experience

4. Third-Party Data Sharing & AI Processing

We share your data with trusted third-party service providers to deliver our Service. Each provider has been carefully selected and operates under strict data protection agreements.

4.1 Anthropic (Claude API)

  • What We Share: Your voice transcripts, content preferences, and professional context
  • Purpose: To generate personalized content based on your voice inputs
  • Data Processing: Anthropic processes your data as our data processor. Anthropic does not use API data to train their models.
  • Location: Data may be processed on servers in the United States

4.2 OpenAI (Whisper API)

  • What We Share: Your voice recordings (audio files)
  • Purpose: To transcribe your voice recordings into text
  • Data Processing: OpenAI processes audio files as our data processor under their API Terms. OpenAI does not use API data to train their models.
  • Location: Data may be processed on servers in the United States

4.3 Other Service Providers

  • Stripe: Payment processing for subscriptions. Stripe handles all credit card information securely. We do not store full credit card details on our servers.
  • Resend: Transactional email delivery for account verification, password resets, and notifications
  • Zoom: Demo bookings. When you book a demo, Zoom receives the name, email address and answers you enter on its booking page, and the campaign labels in the link that brought you.
  • Supabase (PostgreSQL): Secure cloud database hosting for your account data, voice transcripts, and generated content
  • Social Publishing: If you connect your social media accounts, Agent Craft securely manages the OAuth authorization with your explicit permission through our publishing infrastructure.

4.4 Advertising and Measurement Partners

We advertise Agent Craft on Meta (Facebook and Instagram), LinkedIn, Google and TikTok, and we measure which of those ads bring us new customers. To do that:

  • On our public website pages (not inside the app, not on our free tools, and not on sign-in pages), the Meta Pixel, LinkedIn Insight Tag, Google Analytics and TikTok Pixel record page visits. Meta and Google also record clicks on "Book a demo" and "Start free trial", and TikTok records clicks on "Start free trial".
  • When you sign up or make a purchase, we may send Meta, LinkedIn and Google the type of event, the amount you paid, and the identifiers their own cookies or ad links placed in your browser. Meta and Google also receive the campaign that brought you. Meta and LinkedIn also receive a hashed (SHA-256) version of your email address, and Meta your IP address and browser type. TikTok receives its own click identifier and cookie, your IP address and browser type, but never your email address or name.
  • When you ask for your results from our Ideal Customer Profile template or Personal Brand Statement Generator, we may tell TikTok that a lead came from that tool, with its own click identifier and cookie, your IP address and browser type, but never your email address, your name or anything you wrote. Nothing is loaded on the tool page itself; this is sent from our server, and only if TikTok's own cookie or a TikTok ad link is already in your browser.
  • Partners use this to tell us which ads worked and to improve how our ads are shown. We do not send them your content, voice recordings or anything you create in the Service.

Important: By using our Service, you explicitly consent to sharing your voice recordings and transcripts with OpenAI and Anthropic for the purposes of transcription and content generation. You can withdraw this consent at any time by discontinuing use of the voice recording features.

5. Data Retention & Deletion

5.1 Retention Periods

  • Voice Recordings (Audio Files): Deleted from our servers within 30 days after successful transcription.
  • Voice Transcripts: Retained as long as your account is active or until you delete them.
  • Generated Content: Retained as long as your account is active or until you delete it.
  • Account Information: Retained as long as your account is active. Deleted within 90 days after account closure.
  • Demo Booking Campaign: The ad or campaign that brought you to a demo booking (see section 10) is removed after 12 months, or sooner if you delete your Agent Craft account and booked with its email address.

5.2 Your Deletion Rights

You have the right to delete your data at any time:

  • Delete individual voice notes and content from your dashboard
  • Request account deletion by contacting privacy@agentcraft.ai
  • Use the "Delete Account" feature in your account settings

6. Your Privacy Rights

Depending on your location, you may have the following rights:

6.1 GDPR Rights (European Union & UK)

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data (right to be forgotten)
  • Portability: Export your data in a machine-readable format
  • Restriction: Limit how we process your data
  • Objection: Object to processing based on legitimate interests
  • Withdraw Consent: Withdraw consent for data processing at any time

6.2 CCPA/CPRA Rights (California & Other US States)

  • Know: What personal information we collect, use, and share
  • Access: Request a copy of your personal information
  • Delete: Request deletion of your personal information
  • Correct: Request correction of inaccurate information
  • Opt-Out of Sharing: We do not sell your personal information. We do share limited identifiers with advertising partners to measure our own ads (see section 4.4), which California law may treat as "sharing" for cross-context behavioral advertising. To opt out, email privacy@agentcraft.ai with the subject "Do not share" and we will stop sending your sign-up and purchase information to advertising partners. To stop the partner cookies on our public pages, block or delete them in your browser settings.

To exercise your rights, contact us at privacy@agentcraft.ai. We will respond within 30 days.

7. Security Measures

We implement industry-standard security measures to protect your data:

  • Encryption: All data transmitted over the internet uses TLS 1.2+ encryption. Data at rest is encrypted using AES-256.
  • Password Security: Passwords are hashed using bcrypt with salt
  • Access Controls: Role-based access controls limit who can access your data
  • Secure Authentication: JWT tokens with expiration for session management
  • Regular Security Audits: We conduct regular security reviews and updates

8. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at privacy@agentcraft.ai.

9. International Data Transfers

Your information may be transferred to and processed in the United States and other countries where our service providers operate. These countries may have different data protection laws than your country. We ensure adequate safeguards are in place through:

  • Standard Contractual Clauses approved by the European Commission
  • Data Processing Agreements with all third-party processors
  • Compliance with applicable data protection regulations

10. Cookies & Tracking

We use cookies and similar technologies to:

  • Maintain your logged-in session and remember your preferences (essential)
  • Analyze Service usage and performance, using Microsoft Clarity, Vercel Web Analytics and, on our public website pages, Contentsquare
  • Remember which campaign brought you to us: our own utm_attribution cookie (your first visit) and utm_last_touch cookie (your most recent visit from a campaign or ad), each kept for 90 days, and ac_ttclid (a TikTok ad click, 28 days)
  • When you click "Book a demo", keep the ad or campaign that brought you (the same details as our campaign cookies) for up to 30 days so we can match it to your booking. If you book, we save it with your booking and remove it after 12 months, or sooner if you delete your Agent Craft account and booked with its email address
  • Measure our advertising, through cookies set by our advertising partners on our public website pages: Meta (_fbp, _fbc), Google (_ga), LinkedIn and TikTok (_ttp)

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our Service.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the new Privacy Policy on this page
  • Updating the "Last Updated" date
  • Sending you an email notification (for significant changes)

Your continued use of the Service after changes become effective constitutes acceptance of the revised Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@agentcraft.ai
Support: support@agentcraft.ai
Response Time: We respond to privacy requests within 30 days

By using Agent Craft, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.