Privacy policy
This policy explains what Agency collects when you use it, why, who else handles it, and how to get it deleted. “Agency,” “we,” and “us” mean the Agency notes app at agencynotes.app and the people who run it.
The short version:
- Your notes are yours. We use them to run Agency for you and for nothing else.
- We do not sell your data, show you ads, or use your notes to train AI models.
- When you use an AI feature, the text or audio it needs is sent to the AI provider that does the work, listed below.
- You can ask us to delete your account and everything in it at any time.
What we collect
Your account. Your email address and password. The password is stored by our sign-in provider in hashed form, and we cannot read it.
Your notes and what the AI features make from them. Everything you write in Agency, and everything Agency writes to your notes when you approve it: your values and goals, reflections, reminders, goal check-ins and their answers, and the record of your conversations with the assistant.
Your voice, when you use it. When you dictate or do a spoken interview, the recording is sent to be turned into text. Agency keeps the text, not the recording.
What outside apps send us. If you connect another AI app or agent to Agency, we keep what it sends on your behalf, such as things you said that it passed along to be filed in your notes, goal check-ins, bug reports, and feature requests. We also keep the name of each connected app and when it last used Agency.
Billing. Your subscription status, the date it renews, and the ID Stripe gives your customer record. Stripe collects your card details directly. We never see or store your card number.
Usage. For each AI request: when it happened, which feature and model it used, and what it cost. This is how the free trial is measured. We also record when you open the app, which features you use, what kind of device you are on, and your time zone, so that reminders arrive at the right local time and so we can see how Agency is used.
Notifications. If you turn on reminders, your browser gives us an address to send push notifications to. We store it until you turn reminders off.
Email to us. If you write to us, we keep the message and our reply.
Cookies and browser storage
Agency uses cookies only to keep you signed in. It saves some preferences, such as your theme, in your browser’s local storage. There are no advertising cookies and no third-party analytics or tracking scripts.
How we use it
- To run Agency: store and sync your notes, and carry out the AI features you use.
- To bill you and to measure the free trial.
- To send reminders and check-ins you set up.
- To answer you when you contact us.
- To find and fix problems, prevent abuse, and keep accounts secure.
- To decide what to improve, using the usage records described above. We look at counts and patterns, such as how often a feature is used, not at what your notes say.
We do not read your notes, except when you ask us to (for example, to help with a problem), when it is needed to fix a fault affecting your account, or when the law requires it.
Who else handles your data
Agency is built on the services below. Each receives only what it needs to do its part, and each handles it under its own privacy terms.
- Supabase stores your account and notes, and handles sign-in.
- Vercel hosts the app. Every request to Agency passes through it.
- Anthropic runs the assistant, interviews, reflections, and filing. When you use these, the relevant notes and your messages are sent to it.
- Groq turns your recordings into text when you dictate or do a spoken interview.
- ElevenLabs turns replies into speech when you have them read aloud.
- Stripe processes payments.
- Your browser’s push service (run by Apple, Google, or Mozilla, depending on your browser) delivers reminder notifications. The contents are encrypted so that only your browser can read them.
Apps and agents you connect to Agency can read and write what you allow them to. You can see and revoke them in Settings under Agent access.
We will disclose data if the law requires it, such as under a valid court order. If Agency is sold or merged into another company, your data would go with it, and this policy would continue to apply to it until you were told otherwise and given the chance to delete your account.
How long we keep it
We keep your data while your account exists. Notes you delete go to the trash, and are removed when you empty it. When your account is deleted, your notes and everything tied to the account are deleted with it. Copies may remain in encrypted backups for a limited time before they are overwritten. Stripe keeps payment records for as long as the law requires it to.
Your choices
You can ask us for a copy of your notes, and of your account details such as your email address, subscription status, and a summary of your usage. You can also ask us to correct your data, or to delete your account and everything in it. Email agencynotesapp@gmail.com from the address on your account, and we will do it within 30 days. Depending on where you live, you may have further rights under laws such as the GDPR or the California Consumer Privacy Act. We honor those requests the same way, and you may also complain to your local data protection authority.
Security
Data is encrypted in transit and at rest. Each account can read only its own rows in the database. No system is perfectly secure, and if a breach affects your data we will tell you.
Where data is processed
Agency is run from the United States, and the services above may process data in the United States and other countries.
Children
Agency is not meant for anyone under 18, and we do not knowingly collect data from children. If you believe a child has an account, email us and we will delete it.
Changes
If we change this policy, we will update the date below. If a change affects how your existing data is used, we will tell you by email or in the app before it takes effect.
Contact
Questions or requests about your data: agencynotesapp@gmail.com.
Last updated September 22, 2026.