Privacy Policy
Last updated October 2026
Draft — pending legal review. AgentLife OS is operated by Kindred Works, Inc. (“we”). This policy explains what we collect and how we protect it.
What we collect
- Account data: your email address and sign-in records (we never store passwords; you sign in with email links or passkeys).
- Your content: conversations, memories, people, dates, tasks, projects, deals, transactions, documents and settings you add. This content is yours.
- Public agent visitors: messages visitors send to a member's public AI, and contact details they choose to share. We store a keyed hash of visitor network information for abuse prevention, not raw IP addresses.
- Usage records: AI usage amounts and costs for billing and fair-use enforcement.
How we use it
To provide the service you ask for: answering your requests, remembering what you choose, building your dashboards, and operating your public profile. We do not sell your data and we do not use your private content to train third-party AI models.
AI processing
To answer requests we send the relevant portion of your content to our AI providers (currently Anthropic, and optionally OpenAI for search indexing) under their commercial API terms, which prohibit training on API data. Only the minimum context needed for each request is sent — never your full archive.
Where data lives
Databases run on DigitalOcean managed PostgreSQL, files are stored in Cloudflare R2, traffic is protected by Cloudflare, and transactional email is sent by Resend. Data is encrypted in transit and at rest.
Your controls
- See, correct, hide or delete any memory in the Memory Center, and choose how automatic memory works.
- Export all of your data at any time from Settings.
- Delete your account from Settings. Deletion is immediate; encrypted backups roll off within 7 days.
- Your public agent can only access information you explicitly publish.
Staff access
Administrators see aggregate operational metrics, not your conversations, memories or documents. Any exceptional support access requires your authorization and is time-limited and audited.