Privacy Policy

Last updated: July 15, 2026

This Privacy Policy explains how AgentFlow ("AgentFlow", "we", "us") collects, uses, shares, and protects information when you use our software-as-a-service platform at runagencyos.com and related services (the "Service"). By using the Service you agree to this policy.

Information we collect

  • Account data: your name, email address, password (stored only as a salted hash), workspace and organization details.
  • Customer content: data you create or import into the Service, such as contacts, companies, deals, calendars, bookings, notes, tasks, messages, and files.
  • Communications: emails, SMS, and calls you send or receive through connected providers, and their metadata.
  • Connected-account tokens: when you connect a third-party account (e.g. Zoom, Google, an email mailbox, or a phone provider), we store the access and refresh tokens needed to act on your behalf. These are encrypted at rest.
  • Usage and device data: log data, IP address, and basic analytics needed to operate and secure the Service.

How we use information

  • To provide, maintain, and improve the Service.
  • To perform the actions you request through connected accounts — for example, creating a Zoom or Google Meet meeting when a booking is made, or sending an email or SMS.
  • To secure the Service, prevent abuse, and comply with law.
  • To communicate with you about your account and support requests.

Third-party integrations

The Service integrates with third-party providers only to perform functions you enable. These may include Zoom and Google (video conferencing and calendar), Twilio (voice and SMS), and email providers. We share only the data necessary to perform the requested action, and we do not sell your data.

Google user data

AgentFlow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. When you connect a Google account, AgentFlow requests only the scope needed to create calendar events with Google Meet links on a calendar the app creates. We use this access solely to generate and share meeting links for your bookings. We do not use Google user data for advertising, and we do not transfer or sell it. You can revoke access at any time from your Google account permissions or by disconnecting inside AgentFlow.

Zoom user data

When you connect a Zoom account, AgentFlow requests only the scope needed to create meetings on your behalf. We use this access solely to create a Zoom meeting and share its join link when a booking is made. We do not access, record, or store meeting content, and you can disconnect at any time from inside AgentFlow or from the Zoom App Marketplace.

How we protect data

Data is transmitted over TLS and stored on access-controlled infrastructure. Third-party credentials and OAuth tokens are encrypted at rest. Access to production data is limited to the extent needed to operate the Service.

Data retention and your choices

  • You can access, correct, export, or delete your content from within the Service, or by contacting us.
  • Disconnecting a provider deletes the stored tokens for that connection.
  • We retain data for as long as your account is active or as needed to provide the Service and meet legal obligations.

Cookies

We use strictly necessary cookies to keep you signed in and to secure the Service. We do not use advertising cookies.

Changes

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Contact

Questions about this policy? Email support@runagencyos.com.