Privacy notice

Information and purposes

We process account identifiers, email address and sign-in records to provide and secure your account; workspace membership, instance configuration and usage to deliver hosting; billing identifiers, invoices and payment status to administer purchases; and support correspondence to resolve requests. Hosting may process the files, prompts and credentials you choose to put in an instance. Avoid sending unnecessary sensitive information.

Contract performance is the basis for account, hosting and billing administration; legal obligations apply to accounting records; legitimate interests support proportionate security and abuse prevention. Optional analytics uses your consent. We do not sell your personal data. You remain responsible for the data your agents process about others.

Providers and international transfers

Service providers include Supabase (authentication/database, EU/US), Stripe (payments), PostHog EU (consented analytics), Resend (email), Agent37 (infrastructure; instances in the US unless an available EU region is selected), Composio (connected tools), Cloudflare (DNS/security/email routing) and Google (optional sign-in and consented Google Analytics 4). AI and connected-tool providers you select also receive data necessary for their functions. Their separate terms and privacy notices apply where they act as independent controllers.

For transfers outside the EEA, the owner must confirm applicable adequacy decisions, contractual safeguards and supplementary measures before launch: {{INTERNATIONAL_TRANSFER_SAFEGUARDS}}. Ask the contact below for details and copies of applicable safeguards.

Retention

Account and workspace data are retained while needed to provide the service; after account closure: {{ACCOUNT_RETENTION_PERIOD}}. Security and support records: {{SECURITY_SUPPORT_RETENTION_PERIOD}}. Invoices and financial records: {{ACCOUNTING_RETENTION_PERIOD}} as required by applicable law. Optional analytics: {{ANALYTICS_RETENTION_PERIOD}}. The proposed instance backup window is seven days; deletion may finish as backups expire. Instances may be deleted after 30 days of negative wallet balance, subject to the approved terms and any legal preservation duties.

Analytics and security

Optional Google Analytics 4 loads only after consent when configured; PostHog setup is currently deferred. Product event properties must not include prompts, terminal contents, file names or email addresses. Essential session storage supports sign-in; local preferences remember your theme and consent choice. We apply access controls and proportionate security measures, but no online service guarantees absolute security.

Your rights

You may request access, correction, deletion, restriction, portability or object to processing where the applicable conditions are met. Withdraw analytics consent at any time without affecting earlier lawful processing. Use the cookie preferences control or contact support@agentloader.dev. We may need proportionate identity verification. You may complain to the Belgian Data Protection Authority or the supervisory authority in your country. We do not make decisions with legal or similarly significant effects solely through automated processing for account administration.

Seller and contact

Agent Loader is a trade name of KISS BV.

Registered address: {{KISS_BV_ADDRESS}}
Company number (KBO): {{KISS_BV_COMPANY_NUMBER}}
VAT number: {{KISS_BV_VAT_NUMBER}}
Email: {{KISS_BV_EMAIL}}

Service contact: support@agentloader.dev