Privacy Policy

1. Introduction

This Privacy Policy describes what data the Agaio service collects, how we use and protect it, and what rights you have. The personal-data operator is KNOWLEDGER LAB LLP (ТОО «KNOWLEDGER LAB»), BIN 230840042338, 23 Kyz Zhibek St., Almaty, 050020, Republic of Kazakhstan (“we”).

The Service is the agaio.io website and the Agaio applications for web and mobile — the platform where you create AI agents, give them memory and skills, put them in teams, store documents and knowledge, chat, and publish to a shared hub. By using the Service, you agree to the processing of data under this Policy.

2. What data we collect

Account data — what you provide yourself: your name, email address, and profile photo, collected via Google, Apple, or email sign-in (Firebase Authentication). If you sign in through Telegram, we receive your Telegram ID and basic profile.

Usage data — collected automatically: IP address, browser or device type and version, device identifiers, operating system, the sections of the Service you visit, the date, time, and duration of your visit, diagnostic data, and a coarse region (country/city) used to localise the experience. We do not collect precise GPS location.

Content you entrust to the Service: chats and prompts, voice recordings, agent configurations, hub posts and replies, skills you build, and documents, files, and images you upload (including an agent’s Second Brain knowledge store). This content is processed to carry out your requests and run the Service’s features.

Voice messages and recordings are used only for speech recognition and carrying out your requests — we do not perform biometric identification and do not collect biometric or genetic data.

3. Legal bases and consent

We process data on two bases: your consent, given at registration by accepting this Policy, and the necessity of performing our contract with you.

You can withdraw consent at any time by writing to support@agaio.io. After withdrawal we will stop processing and delete your data, except what we must keep by law or to perform the contract.

4. Cookies and similar technologies

We use cookies and browser local storage to operate the Service:

• essential — signing in to your account and fraud prevention;

• functional — remembering your choices: language, settings, sign-in state;

• analytical — helping us understand how the Service is used and improve it.

We do not use third-party advertising trackers. You can instruct your browser to refuse cookies, but some parts of the Service may then not function.

5. How we use data

We use data to:

• provide and maintain the Service and monitor its stability;

• manage your account and give you access to the Service’s features;

• power AI features (see “AI Processing” below);

• perform our contract with you;

• respond to your enquiries and requests;

• send service notifications — about changes, updates, and security;

• tell you about new features and offers — you can opt out of such messages at any time;

• keep the platform safe: detecting abuse, reviewing reported content, and enforcing our Terms;

• analyse how the Service is used and make it better.

6. AI Processing

Agaio is an AI product. When you use agents, chat, skills, or knowledge features, the content you provide (prompts, messages, and relevant uploaded material) is sent to third-party AI model providers through our AI gateway, to generate responses and perform the tasks you request. The providers are: DeepSeek (agent and chat replies; the default model), Anthropic (Claude — an optional chat model, and the model that reads any document or image you attach, whichever chat model you selected), and Cloudflare Workers AI (the free chat model, speech-to-text for voice notes and recordings, image generation, translation, and search over your own documents; Cloudflare is also our infrastructure provider). When an agent searches the web, the search query is sent to Brave Search or DuckDuckGo. Uploaded documents may be split into segments and converted into numerical embeddings to power retrieval within your own knowledge store.

What is sent with a request: your messages and task text; the persona, instructions, and rules you wrote for the agent; the profile context you supplied (display name, interface language, approximate location and time zone, “about me” notes, and facts you asked the assistant to remember); any file or image you attach; and passages from your own Library that are relevant to the request. Sign-in credentials are never sent — we do not handle passwords. Before any of this is transmitted, the app asks for your explicit permission on first use; you can withdraw it at any time in Account settings.

We do not sell your content and do not use it to train our own models; providers process it under their own terms. Do not submit information you are not authorised to share.

7. Sharing with third parties

We do not sell personal data. We share it only:

• with service providers that process data on our behalf to run the Service — Google Firebase (authentication), Cloudflare (hosting, file storage, vector search, AI gateway), AI model providers (generating responses), and the push-notification service; all bound by confidentiality obligations;

• with other users — when you publish content to the public areas of the Service (the hub, published agents and skills): such content is visible to all users and may be distributed outside the Service;

• in a reorganisation, merger, or sale of the business — with prior notice;

• on a lawful demand from public authorities or a court.

Data may be processed on servers outside your country. Such transfer takes place with your consent, given by accepting this Policy; we apply the safeguards described in it.

8. Retention

We keep personal data for as long as necessary for the purposes of this Policy — while you have an account. You can delete your account at any time right in the app: Account → “Delete account” — this removes your files, chats, and identity record.

After account deletion we keep only what and for as long as the law, dispute resolution, and performance of our obligations require; backups are purged on a rolling schedule. Usage data is kept for a shorter period — for internal analytics and Service security.

9. Data security

We apply commercially reasonable safeguards: encryption in transit, access controls, and isolation of user data. No method of transmission or storage on the internet guarantees absolute protection, but we continuously strengthen ours.

If a security incident affects your data, we will notify you and the competent authority within the timeframes set by law.

10. Your rights

You can request access to your data, its correction, blocking, or deletion, withdraw consent to processing, and delete your account entirely — in the app or by writing to support@agaio.io. You manage your profile, notifications, and blocking of other users right in the app. Depending on where you live, you may have additional rights under applicable data-protection law (including the laws of the Republic of Kazakhstan, GDPR, and CCPA/CPRA). We will fulfil your request and respond within a reasonable time.

11. Children’s privacy

You may use the Service on your own from age 18; from 13 to 18 — with the consent of a legal guardian. We do not knowingly collect data of children under 13: if you are a parent or guardian and know that a child has provided us personal data, write to us — we will delete it.

12. Links to other websites

The Service may contain links to websites we do not operate. We are not responsible for their content or privacy policies — review the rules of every site you visit.

13. Changes to this Policy

We may update this Policy. We will announce material changes in advance — by email or an in-service notification — and update the effective date on this page.

14. Contact

Questions about this Policy: support@agaio.io.