Privacy policy

MyDeepAgents ("we", "us") runs the website mydeepagents.com and the MyDeepAgents platform, where organizations build, run and embed AI agents and workflows. You can reach us at khurram@mydeepagents.com.

For your account data (your name, email and sign-in details) we decide how the data is used, so under India's Digital Personal Data Protection Act 2023 we are the Data Fiduciary. For the content an organization puts into the platform (its agents, workflows, files and conversations) we process it on that organization's instructions, and the organization decides how it is used.

• Account details: your name, email address and profile picture. When you sign in with Google, Microsoft, Apple, Amazon or Meta, that company sends us these and whether your email is verified, and nothing else.
• Sign-in and security data: when and how you signed in, your IP address and browser details, so we can keep your account safe and spot misuse.
• Organization content: the agents, workflows, widgets, files, instructions and conversations you and your colleagues create or upload.
• Connections: when you connect a tool such as Gmail, Outlook or a CRM, we store the access the tool grants (an access token) so agents can act on your behalf. Tokens are encrypted, and you can disconnect at any time.
• Usage and billing: which features are used, how many runs and model calls an organization makes, and billing details for paid plans.
• Support: what you send us when you ask for help, including the help chat on this website.

This website uses no advertising or tracking cookies. It stores only your light or dark theme choice in your browser.

• To provide the platform: sign you in, run your agents and workflows, and show you your organizations.
• To keep it secure: detect abuse, investigate incidents and protect your account.
• To support you and to tell you about changes to the service, your account or these policies.
• To keep the service reliable, by measuring how it performs.
• To meet our legal obligations.

We do not sell personal data, we do not use it for advertising, and we do not use your organization's content to train AI models.

When you sign in with Google we receive your name, email address, email verification status and profile picture, and use them only to create and sign in to your MyDeepAgents account.

When you connect a Google tool (for example Gmail, Calendar or Drive), agents in your organization read or change data in that tool only as you set them up to, and only to do the work you asked for. We do not use that data for advertising, we do not sell it, and people at MyDeepAgents do not read it unless you ask us to for support, it is needed for security, or the law requires it.

MyDeepAgents' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

You can remove our access at any time from your Google Account (https://myaccount.google.com/permissions), or by disconnecting the tool in the console.

• Service providers that run the platform for us, under contract: Amazon Web Services for hosting, storage and sign-in (Amazon Cognito), and our email delivery provider.
• AI model providers that your organization chooses, such as Anthropic, OpenAI, Google or Amazon Bedrock. They receive the prompts and content an agent sends them to do its work.
• The tools you connect, when an agent acts in them on your behalf.
• Your organization's administrators, who can see the members, activity and content of their organization.
• Authorities, when the law requires it, and a buyer or successor if MyDeepAgents is ever sold or merged, under this same policy.

The platform runs on Amazon Web Services in the United States (us-east-1). Using the service means your data is transferred there, which Indian law permits except to countries the Government of India restricts.

We keep account data while your account is open. Organizations choose how long runs and conversations are kept, in their settings. When you ask us to delete your account, we delete your personal data within 30 days, except what the law requires us to keep. Backups expire within a further 35 days.

Data is encrypted in transit and at rest, each organization's data is kept separate, connection tokens and keys are stored encrypted, and access by our team is limited and logged. No system is perfectly secure. If a breach affects your personal data, we will tell you and the authorities as the law requires.

You can ask us to:

• tell you what personal data we hold about you and how we use it;
• correct, complete or update it;
• erase it, and withdraw consent you gave earlier;
• nominate someone to exercise these rights for you if you die or become unable to.

Email khurram@mydeepagents.com and we will answer within the time the law sets. If your organization manages your account, we may pass your request to its administrators.

For any complaint about how we handle personal data, contact our Grievance Officer, Shah Khurram, at khurram@mydeepagents.com. We will acknowledge it within 24 hours and resolve it within 15 days. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

MyDeepAgents is for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has given us their data, tell us and we will delete it.

If we change this policy we will update the date at the top, and for important changes we will tell you by email or in the console before they take effect.

Questions about this policy: khurram@mydeepagents.com.