Privacy Policy

Last updated 10 June 2026

This policy explains what we collect, why, and your choices. We handle personal information in line with the Australian Privacy Principles (APPs).

Who we are

AgntOS is operated by Vertial Holdings Pty Ltd, an Australian company. We are the entity responsible for your personal information under this policy.

What we collect

  • Account details — your name and email address, and authentication data (or a Google sign-in identifier if you use it).
  • Payment information — processed by Stripe. We receive billing status and a customer identifier; we do not store your full card number.
  • Agent data — the configuration, conversations, memory, skills, and files you give your agent so it can do its job.
  • Channel identifiers — if you connect Telegram, the bot token (stored encrypted) and related identifiers.
  • Usage and technical data — model spend totals, logs, and basic product analytics used to operate and improve the Service.

How we use it

  • to create and run your agent and provide the Service;
  • to process payments, meter usage against your wallet, and prevent abuse;
  • to send transactional email (verification, receipts, balance and account notices);
  • to secure, debug, and improve the Service; and
  • to meet legal obligations.

We do not sell your personal information.

Who we share it with

We share data with service providers who process it on our behalf, only as needed to run the Service:

  • Stripe — payments;
  • Fly.io — hosting your agent’s compute and storage;
  • OpenRouter — routing your agent’s model requests;
  • Cloudflare — DNS for your agent’s address;
  • Railway — our application database and worker;
  • Resend — transactional email delivery;
  • PostHog and Sentry — product analytics and error monitoring;
  • Telegram — only if you choose to connect it.

We may also disclose information if required by law or to protect our rights, users, or the public.

Where your data is stored

Your agent runs in a cloud region we select (by default, Sydney, Australia). Some of our providers are based overseas (including the United States), so your information may be processed outside Australia. Where that happens, we take reasonable steps to ensure it is handled consistently with this policy and the APPs.

Security

We protect data in transit with TLS and encrypt sensitive secrets (such as channel tokens and dashboard credentials) at rest. No system is perfectly secure, but we take reasonable steps to protect your information from misuse, loss, and unauthorised access.

Retention and deletion

We keep your information while your account is active. If your subscription is cancelled and not reinstated, your agent and its data are permanently deleted approximately 14 days later. You can request deletion of your account and data sooner by contacting us. We may retain limited records where required by law (for example, payment records).

Your rights

You can request access to, or correction of, the personal information we hold about you. To do so, or to make a privacy complaint, email privacy@agntos.net. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Cookies and analytics

We use essential cookies to keep you signed in and privacy-respecting analytics to understand how the Service is used. You can control cookies through your browser settings.

Children

The Service is not directed at, and is not for, anyone under 18.

Changes

We may update this policy from time to time. We will post the new version here and update the date above; material changes will be communicated where practical.

Contact

Privacy questions or requests: privacy@agntos.net.