Agentmart Privacy Policy

1. Introduction

Veriad, Inc. ("us", "we" or "our") operates Agentmart at https://agentmart.to (the "Service"), a marketplace where people build AI agents ("Builders") and use agents built by others. This Privacy Policy explains how we collect, use, safeguard and disclose information when you use the Service. By using the Service, you agree to the collection and use of information in accordance with this policy. Unless defined here, terms in this Privacy Policy have the same meanings as in our Terms of Service, which together with this Privacy Policy form your agreement with us.

2. Definitions

Personal Data means data about a living individual who can be identified from that data, or from that data and other information in our possession or likely to come into our possession.

Usage Data is data collected automatically, generated by the use of the Service or by the Service's infrastructure itself (for example, the duration of a page visit).

Connected App means a third-party account, such as Gmail, Google Calendar or Slack, that you connect to the Service so an agent can read from it or act in it on your behalf.

Data Controller means the person who determines why and how Personal Data is processed. For the purposes of this Privacy Policy, we are the Data Controller of your data.

Service Providers are third parties that process data on our behalf, listed in Section 13.

3. Information We Collect

Account and profile information

When you sign in, we receive your name, email address and profile photo from the sign-in method you choose, such as Google. If you build agents, you may add a public profile with a handle, headline, bio and links to your social accounts.

Agents, listings and reviews

If you build an agent, we store its configuration: its name, instructions, skills and files, the apps and abilities it uses, its triggers and settings, and its listing, including the tagline, description, categories and example chats. If you leave a review, we store your rating and text.

Chats and files

When you use an agent, we store your conversation with it, including your messages, the files you attach, the agent's replies, the actions it proposed or took and your approvals, so you can see your history and the agent can continue the conversation.

Connected App data

When you connect an app, you authorize access through that app's own sign-in (OAuth). Your agents then read content from it, such as emails, calendar events, messages or documents, and take actions in it, such as drafting or sending an email, only as needed to do what you ask or what the agent's triggers are set to do. Actions that change something in a Connected App can be set to wait for your approval. Access tokens are stored by our Service Provider Composio. You can disconnect an app at any time. Our handling of data from Google APIs is governed by Section 18.

Payment and payout information

When you buy credits, Stripe collects your payment details. We receive a record of the purchase, but not your full card number. If you earn money as a Builder, Stripe Connect collects the identity, tax and bank details needed to pay you. We record your earnings and payouts.

Usage Data

We collect information your browser or device sends when you use the Service, such as your IP address, browser type and version, the pages you visit, the time and date of your visit, the time spent on those pages, device identifiers and diagnostic data. We also record how agents are used, such as how many messages are sent, which tools run, how long they take, whether they succeed and how many credits they use.

4. How Agents Use Your Data

To answer a message or run a trigger, the Service sends the relevant part of your conversation, your files and any Connected App data the agent reads to an AI model provider, through the Vercel AI Gateway, to generate a reply or decide on an action. Agents with web search, image generation or code abilities also send the data needed for those tasks to the providers that perform them.

• No training on your data. We do not use your chats, files or Connected App data to train AI models, and we use AI model providers under API terms that do not permit them to train their models on data we send them.
• Builders can't read your chats. The Builder of an agent you use cannot see your conversations, your files or your Connected App data. Builders see only aggregated statistics about their agents, such as the number of people using them and message counts. We hide breakdowns that cover fewer than five people so individuals can't be singled out, and we never show Builders who you are unless you choose to leave a public review.
• Public content. Agent listings, Builder profiles and reviews, including the reviewer's name and photo, are public.

5. How We Use Your Data

We use the data we collect to:

1. provide, operate and maintain the Service;
2. run the agents you use, including in the background on schedules or app events you set up;
3. process credit purchases, charge credits for usage and pay Builders;
4. review agents before they are listed, and investigate reports of abuse;
5. send you service emails, such as approval requests, review results and notices about your account;
6. provide customer support;
7. understand how the Service is used, so we can improve it;
8. measure how well our advertising works, as described in Section 14;
9. detect, prevent and address technical issues, fraud and abuse;
10. comply with our legal obligations and enforce our terms;
11. for any other purpose with your consent.

6. Retention of Data

We keep Personal Data only for as long as needed for the purposes in this Privacy Policy, and as needed to comply with our legal obligations, resolve disputes and enforce our agreements. Chats and Connected App data are kept while your account is active and deleted when you delete them, remove the agent or delete your account. Records of purchases, usage charges and payouts are kept as long as required for tax and accounting. Usage Data and agent run recordings are kept for a shorter period, unless we need them to strengthen security or investigate a problem.

7. Transfer of Data

Your information, including Personal Data, may be transferred to and processed on computers outside your state, province or country, where data protection laws may differ from those in your jurisdiction. Most of our Service Providers process data in the United States; our analytics provider, PostHog, processes data in the European Union. Where required, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, for these transfers.

8. Disclosure of Data

We do not sell your Personal Data. We may disclose it:

1. to the Service Providers in Section 13, only to perform services for us;
2. to the Connected Apps you authorize, when an agent acts in them on your behalf;
3. to Meta, to measure and improve our advertising, as described in Section 14;
4. if required by law or in response to valid requests by public authorities;
5. as part of a merger, acquisition or sale of assets, subject to this Privacy Policy;
6. with your consent in any other case.

9. Security of Data

We protect your data with encryption in transit, access controls and isolated environments for code that agents run. Connected App access tokens are held by Composio rather than in our own database. No method of transmission over the Internet or of electronic storage is 100% secure, so while we use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

10. Your Data Protection Rights Under GDPR

If you are in the European Economic Area or the United Kingdom, you have rights under the GDPR and UK GDPR. We process your Personal Data to perform our contract with you, to pursue our legitimate interests in running and improving the Service, to comply with the law, and with your consent where we ask for it. You have the right to:

1. access, update or delete the information we have on you;
2. have inaccurate or incomplete information corrected;
3. object to our processing of your Personal Data;
4. ask us to restrict the processing of your Personal Data;
5. receive a copy of your Personal Data in a structured, machine-readable and commonly used format;
6. withdraw your consent at any time where we rely on your consent.

To make a request, email us at support@agentmart.to. We may ask you to verify your identity before responding. You also have the right to complain to your local data protection authority.

11. Your Data Protection Rights Under CalOPPA

Under the California Online Privacy Protection Act, we agree that you can visit our site anonymously; that our Privacy Policy link includes the word "Privacy" and is easy to find; that we will notify you of changes on this page; and that you can change your personal information by emailing us at support@agentmart.to.

We do not currently respond to "Do Not Track" signals.

12. Your Data Protection Rights Under CCPA

If you are a California resident, you have the right to know what Personal Data we collect about you, to ask us to delete it, and to opt out of its sale or sharing. We do not sell your Personal Data. We share limited data with Meta to measure our advertising, as described in Section 14, which California law may treat as "sharing" for cross-context behavioral advertising. To opt out of this sharing or exercise your other rights, email us at support@agentmart.to. We will not discriminate against you for exercising them.

13. Service Providers

We use the following Service Providers to run the Service. They have access to your Personal Data only to perform these tasks for us, and are obligated not to disclose or use it for any other purpose.

14. Analytics, Advertising, Session Replay and Agent Run Recordings

We use PostHog to understand how people use the Service. PostHog records page views, clicks and device and browser details, and may record sessions so we can see where people get stuck. The chat area is excluded from click tracking and session replay, and we never send message text, email content or the inputs of agent actions to PostHog.

We use the Meta Pixel and Meta's Conversions API to measure how well our ads on Facebook and Instagram work and to show them to people likely to be interested. The Meta Pixel runs in your browser and records the pages you visit on the Service. When you sign up, start a credit checkout or buy credits, we also send Meta that event, the amount, your IP address and browser details, Meta's browser identifiers, and a one-way hashed version of your email address and account ID. Meta may match this to your Meta account and uses it under its privacy policy. We never send Meta your chats, agents or Connected App data. You can control the ads Meta shows you in your ad preferences, and ask us to stop sharing your data with Meta by emailing support@agentmart.to.

We use Braintrust to record agent runs, including the prompts, replies and tool calls involved, so we can diagnose errors and make agents more reliable. These recordings may contain chat and Connected App content. Access is limited to our team and used only as Section 18 allows.

15. Cookies

We use cookies that are needed to keep you signed in (set by Clerk) and cookies that help us understand how the Service is used (set by PostHog) and measure our advertising (set by Meta). You can block cookies in your browser settings, but you may not be able to sign in without them.

16. Children's Privacy

The Service is not intended for anyone under the age of 18. We do not knowingly collect Personal Data from children under 18. If you become aware that a child has provided us with Personal Data, please contact us and we will remove it.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the date at the top, and we will let you know by email or a notice in the Service before a significant change takes effect.

18. Google API Services User Data Policy

Agentmart's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Appropriate access. We request only the Google scopes needed for the features you use. Signing in with Google gives us your name, email address and profile photo. Connecting a Google app, such as Gmail or Google Calendar, lets the agents you choose read and act in that app as described in Section 4.

Limited Use. Our use of data obtained through Google APIs, and of any data aggregated, anonymized or derived from it, complies with the following:

1. We use that data only to provide or improve user-facing features that are prominent in the Agentmart user interface, such as the agents you run reading your email or calendar and taking the actions you ask for.
2. We do not transfer that data, except: (a) to provide or improve those user-facing features, with your consent, including sending it to the AI model providers and Service Providers in Section 13 that make them work; (b) for security purposes, such as investigating abuse; (c) to comply with applicable laws; or (d) as part of a merger, acquisition or sale of assets, after obtaining your explicit prior consent.
3. We do not use that data, or allow it to be used, to develop, improve or train generalized or non-personalized AI or machine learning models.
4. We do not allow humans to read that data, except: (a) with your affirmative agreement to view specific messages, files or other data; (b) where necessary for security purposes, such as investigating a bug or abuse; (c) to comply with applicable law; or (d) where the data, including derivations, is aggregated and used for internal operations in line with applicable privacy and other legal requirements.
5. We do not transfer or sell that data to third parties such as advertising platforms, data brokers or information resellers, and we do not use it for serving ads, including retargeting, personalized or interest-based advertising, or to determine creditworthiness or for lending purposes.
6. Builders of the agents you use never receive your Google data.
7. We ensure that our employees, agents, contractors and successors comply with the Google API Services User Data Policy.

Secure data handling. Where the Service accesses Google's sensitive or restricted scopes, we follow the security practices Google requires, including, where applicable, an annual security assessment by a Google-designated third party.

You can revoke Agentmart's access to your Google account at any time by disconnecting the app in Agentmart or from your Google Account permissions. When you do, we stop accessing that account's data.

19. Contact Us

If you have any questions about this Privacy Policy, email us at support@agentmart.to.

Veriad, Inc.
2261 Market Street STE 86724
San Francisco, CA 94114