Overview
AgentTask (the “Service”) is provided by AgentTask LLC (“AgentTask”, “we”, “us”). This Privacy Policy explains what personal data we collect, how we use and share it, and the choices and rights you have. It applies to the AgentTask web app, desktop apps, developer API, MCP endpoint, Claude Code plugin, and marketing site. Please note: AgentTask is in a pre-release phase, and this policy is a draft that will be reviewed by legal counsel and finalized before general availability — it may change as the product evolves.
Data we collect
We collect data you provide directly — account and profile details (name, email, organization, and, for paid plans, billing contact information), the content you create in the product (tasks, projects, notes, comments, attachments, and agent runs), and support requests you send us. We also collect data automatically when you use the Service — device and connection information (IP address, browser type, operating system), and usage and diagnostic logs (pages viewed, features used, timestamps, and error reports) needed to operate, secure, and improve the Service.
How we use data
We use personal data to provide, maintain, and improve the Service; to authenticate you and secure your account; to operate AI-assisted and agent features you invoke; to process payments and manage subscriptions; to provide support and send you service-related communications (including transactional emails such as verification, receipts, and records of agreements you accept); and to comply with legal obligations. We do not sell your personal data, and we do not use the content you create to train foundation models without your instruction.
How we share data
We share personal data with service providers who process it on our behalf — for example cloud hosting, database, email delivery, payment processing, and AI model providers that power agent features — under agreements that limit their use to providing services to us. We may disclose data when required by law or legal process, to protect the rights, safety, and security of AgentTask, our users, and the public, and in connection with a merger, acquisition, financing, or sale of assets (in which case we will notify you). We do not sell personal data or share it for cross-context behavioral advertising.
Voice features
Some parts of AgentTask can listen to you. Voice dictation and the hands-free voice call with the board agent, both available in the web app, use your browser’s own speech recognition, which means the browser sends your captured audio to its vendor — Google in Chrome, Apple in Safari — under that vendor’s privacy terms rather than ours; we receive only the text it returns; spoken replies use your browser’s speech synthesis. Realtime voice conversation in the desktop app, a paid-plan feature available where it has been enabled for your organization, works differently. Your microphone is opened only while a voice session is running, and the app indicates on screen and in the menu bar (macOS) or notification area (Windows) for as long as it is open. The audio is streamed to us and relayed on to Google’s Gemini model through Google’s Gemini Developer API, which performs the speech recognition and generates the reply; it is sent together with the assistant’s instructions and the task context it answers from. Our relay authenticates to Google with an API key that we hold, and no Google credential is issued to your device. The audio is not processed on your device, and it is not sent to any other AI provider. The transcript of the conversation, and the tool calls made during it, are kept as a file on your own computer, not in your chat history on our servers, and we do not store the audio itself. On our servers we keep only a usage record of each voice session — who, when, for how many seconds, and why it ended — and nothing of what was said. If you turn on the optional “Hey Agent Task” wake word, a microphone also stays open while you are idle, listening for that phrase entirely on your device; nothing is sent anywhere until the phrase starts a session.
Voice retention at our AI provider
So that a realtime voice conversation survives a dropped connection, we enable Google’s session-resumption feature. Google documents that with resumption enabled it stores cached prompts — including audio — and model output for up to 24 hours, and states explicitly that enabling it is incompatible with a zero-data-retention arrangement. We consider a conversation that silently dies every few minutes to be the worse outcome, so we enable it and disclose it here rather than claim a retention posture we do not have. Separately, Google keeps logs of Gemini Developer API prompts and responses for a limited period to detect abuse of its services. Two things depend on the Gemini API terms that apply to our API key, and we are still confirming them: whether Google may use realtime voice data to improve its products, and in which countries that data may be processed or cached. We will update this section when both are confirmed, and until then we do not make a claim about either. You can stop voice capture at any time: end or never start a session, turn the voice shortcut off in the app, or withdraw microphone permission in your operating-system settings, without which no voice capture is possible at all. An administrator can also switch realtime voice off for your whole organization.
Embedded video
Our Learn lessons are videos hosted on YouTube. Before you press play, the page shows a still image served from our own site and loads nothing from YouTube. When you press play, the video loads from YouTube’s privacy-enhanced domain (youtube-nocookie.com), operated by Google, which receives your IP address and browser details and may store data on your device. Google’s own privacy policy governs that processing.
Browser extension
If you install the AgentTask extension for Chrome, it sends data to AgentTask only when you act. That is the title and address of a page you capture and any text you select, the task details you type, the messages you type to your workspace’s agent in the side panel (plus the current tab’s title and address only if you tick “Include this page”), and the session token that keeps you signed in. It does not read page content, and it does not collect browsing history, form data, keystrokes or analytics. Messages typed in the side panel go to your AgentTask workspace, which sends them to the AI model that workspace uses: by default a Google Gemini model that AgentTask operates on Google Cloud as our service provider, or, if an Enterprise organization has connected its own model provider, that provider.
Tenancy & isolation
AgentTask is a multi-tenant service. Your organization’s data is logically isolated per tenant and is accessible only to the members of your organization and the agents and API keys you authorize. Administrators in your organization can access and manage the data within their organization according to the roles and permissions they configure.
Cookies & tracking
We use strictly necessary cookies to keep you signed in and to operate the Service, and a limited amount of first-party analytics to understand product usage and improve reliability. We do not use third-party advertising cookies. You can control cookies through your browser settings, though disabling strictly necessary cookies may prevent parts of the Service from working.
Data security & retention
We use administrative, technical, and organizational safeguards designed to protect personal data — including encryption in transit, access controls, and per-tenant isolation — but no method of transmission or storage is completely secure. We retain personal data for as long as your account is active and as needed to provide the Service, and thereafter as required to comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed we delete or de-identify it.
Your rights & choices
Depending on where you live, you may have rights to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. Residents of the EEA/UK (under the GDPR) and of U.S. states such as California (under the CCPA/CPRA) have specific rights that we honor. You can exercise many of these directly in your account settings, or by contacting us at support@agent-task.com. We will not discriminate against you for exercising your rights.
Children
AgentTask is a business product and is not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us personal data, contact us and we will delete it.
International data transfers
We may process and store personal data in countries other than the one where you live, including the United States. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for cross-border transfers.
Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes we will update the “last updated” date above and, where appropriate, notify you in the product or by email. Your continued use of the Service after an update means you accept the revised policy.
Contact
Questions about privacy or your data? Email us at support@agent-task.com or reach us via the contact page. AgentTask LLC is the controller responsible for your personal data.