Privacy Policy

Last updated: February 2026

1. Overview

openAgent ("we", "our", "the platform") is an open-source platform for creating and managing AI agents. We take your privacy seriously. This policy explains what data we collect, how we use it, and your rights regarding that data.

2. Data We Collect

Account Data

When you register, we collect your name, email address, and password (stored as a hashed value). We also generate a unique API key for programmatic access.

Agent Data

When you create an agent, we store the agent's name, description, generated skills, memory content, system prompt, knowledge entries, and configuration. This data is necessary to provide the agent service.

Conversation Data

Messages sent to agents are processed in real-time and used for memory and knowledge evaluation. Conversations may be stored to improve agent memory and knowledge base.

Technical Data

We collect standard server logs including IP addresses, browser type, and access timestamps for security and operational purposes.

3. How We Use Your Data

  • To provide and maintain the openAgent service
  • To authenticate your account and API access
  • To process conversations with your AI agents
  • To update agent memory and knowledge base from conversations
  • To improve the platform and fix bugs

4. Third-Party Services

We use OpenRouter as our LLM provider to power AI agent responses. When you send a message to an agent, the message content is forwarded to OpenRouter's API for processing. Please refer to OpenRouter's Privacy Policy for details on their data handling.

We use PocketBase as our database backend. All user and agent data is stored in our self-hosted PocketBase instance.

5. Public Agents

When you mark an agent as "public", anyone can interact with it via the public API endpoint without authentication. Messages sent to public agents are processed the same way as private agents. Be mindful of what data your public agents may collect through conversations.

6. Data Retention

Your data is retained for as long as your account is active. You can delete your agents and their associated data at any time. If you delete your account, all associated data (agents, knowledge, conversations) will be permanently removed.

7. Your Rights

  • Access — You can view all your data through the dashboard
  • Modification — You can edit your agents, skills, memory, and knowledge at any time
  • Deletion — You can delete agents and their data at any time
  • Export — You can access all agent data via the REST API

8. Security

We implement industry-standard security measures including encrypted connections (HTTPS), secure cookie handling, hashed passwords, and API key authentication. However, no system is 100% secure. Use the platform at your own risk.

9. Open Source

openAgent is open-source software. You can review the complete source code to understand exactly how your data is handled. If you host your own instance, you have full control over all data.

10. Changes

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date.

11. Contact

If you have questions about this privacy policy or your data, please open an issue on our GitHub repository.