This Privacy Policy explains how Flowith Technologies Pte. Ltd., a Private Company Limited by Shares incorporated in the Republic of Singapore and operating as Agent.Space (the data controller for the processing described in this Policy, “Agent.Space,” “we,” “us,” or “our”), collects, uses, discloses, transfers, retains, and protects information when you access or use Agent.Space, including its websites, applications, workspaces, AI features, Developer API, subscriptions, Flex credits, collaboration tools, and related services (collectively, the “Services”). It also describes your privacy rights and choices.
Please read this Privacy Policy together with our Terms of Service. This notice describes our practices; using the Services does not replace any separate consent or other legal basis required for a particular processing activity. You may exercise the rights and choices described below.
1. Scope and Definitions
This Privacy Policy applies to Personal Data processed by Agent.Space in connection with the Services. It does not apply to third-party products or services that operate under their own privacy policies.
“Personal Data” means information relating to an identified or identifiable individual. “User Content” means prompts, inputs, files, workflows, tasks, instructions, feedback, AI-generated outputs, and other content submitted, created, or stored through the Services. “Usage Data” means technical and activity information generated through use of the Services. “Service Provider” means a person or entity that processes data for or provides services to Agent.Space.
2. Information We Collect
2.1 Information You Provide
Depending on how you use the Services, you may provide:
- ** Account information:** name, username, email address, phone number, profile information, organization, and authentication information;
- ** Transaction information:** plan, order, invoice, subscription, Flex-credit, tax, refund, and payment-status information. Payment-card details may be collected directly by our payment provider rather than stored by Agent.Space;
- ** User Content:** prompts, files, data, workflows, tasks, tool instructions, AI outputs, shared workspace content, and associated metadata;
- ** Developer information:** API configuration, application identifiers, API requests and responses, rate-limit data, integration settings, and technical contact information;
- ** Remote-control collaboration information:** permission settings, connected device or session identifiers, connection and activity records, commands, execution results, and content processed within an authorized session. Depending on the enabled feature and permissions, this may include screen images or streams, visible application or webpage content, selected files, clipboard content, or interaction events needed to carry out a task. Such content may include information about other people and may be captured as part of operating a task rather than separately uploaded by you. The categories actually processed depend on the feature and connected environment.
- ** Communications:** support requests, survey responses, feedback, and other correspondence; and
- ** Promotion information:** referral identifiers, coupon use, campaign participation, and reward records.
2.2 Information Collected Automatically
When you use the Services, we may automatically collect Usage Data, including IP address, device and browser type, operating system, device or session identifiers, language and time zone, pages or features accessed, timestamps, referring URLs, clicks and interactions, crash reports, performance data, security logs, authentication events, API usage, model usage, token or credit consumption, and diagnostic information.
2.3 Information from Third Parties
We may receive information from identity or sign-in providers, payment processors, model and infrastructure providers, integration partners, analytics providers, fraud-prevention vendors, referral partners, business customers, and other users who invite you to a workspace or share content with you. The information received depends on your settings, the relevant integration, and the third party’s policies.
2.4 Sensitive Information
The Services are not designed for you to submit highly sensitive information unless a feature expressly supports it and appropriate safeguards are in place. Do not include passwords, government identifiers, payment-card data, health records, or other sensitive information in prompts, files, or API requests unless necessary, lawful, and authorized. You are responsible for determining whether your use of the Services is appropriate for the data you submit.
3. How We Use Information
We may use information to:
- provide, operate, maintain, and personalize the Services;
- create and manage accounts, authenticate users, and administer workspaces and permissions;
- process subscriptions, payments, invoices, credits, rewards, cancellations, refunds, and related reconciliation;
- route requests to models and tools, generate outputs, execute workflows, and provide Developer API functionality;
- provide Remote Control Features, administer access and permissions, and investigate security, abuse, support, and compliance issues connected with those features;
- monitor performance, troubleshoot errors, conduct research and analytics, and improve features and user experience, subject to the User Content and model-training limitations in Section 5;
- protect the Services, users, and third parties; detect fraud, abuse, security incidents, policy violations, and unlawful activity;
- communicate service, transaction, security, policy, and support information;
- send marketing communications where permitted by law and honor your opt-out choices;
- comply with legal obligations, respond to lawful requests, resolve disputes, and enforce agreements; and
- evaluate or complete a merger, financing, restructuring, acquisition, sale, or other business transaction.
4. Legal Bases for Processing
Where applicable law requires a legal basis, we process Personal Data as necessary to provide the Services and perform a contract with you; to comply with legal obligations; for legitimate business purposes such as security, fraud prevention, analytics, and service improvement; or with your consent where required. You may withdraw consent at any time, without affecting processing already lawfully completed.
5. AI Data Handling
Agent.Space and service providers acting on our behalf may process User Content and related Usage Data only as reasonably necessary to deliver the features you request, including model inference and authorized tool or remote-control execution; operate and secure the Services; provide support and troubleshoot errors; prevent abuse; comply with law; and enforce our agreements. These activities may include examining content when necessary to investigate a specific error, support request, or security issue. Our general service-improvement language does not authorize unrestricted analysis of identifiable User Content or its reuse for unrelated research or content-based model evaluation.
We may use technical Usage Data and aggregated or de-identified statistics for analytics, performance measurement, and service improvement, subject to applicable law; aggregation or de-identification is not a blanket exemption from data-protection obligations. Any optional use of identifiable User Content for broader quality evaluation or product research requires a separate explanation and your affirmative authorization. We do not use your prompts, inputs, or outputs for model training without your explicit consent, including when a provider would train on our behalf. Any such consent must identify its scope and explain how it can be withdrawn.
When providers process User Content on our behalf, we require appropriate contractual restrictions and safeguards consistent with the authorized purposes and applicable law. Independent third-party integrations that you choose may process information under their own terms and privacy policies; review those terms before enabling them. Those independent terms do not expand the permission granted to Agent.Space or remove our obligations for processing we control.
Do not assume AI outputs are private if you choose to publish them, place them in a shared workspace, share a link, connect a third-party tool, or direct an agent or workflow to send information elsewhere. Review sharing and integration settings before using them.
6. Cookies and Similar Technologies
We may use cookies, local storage, pixels, SDKs, and similar technologies to authenticate users, remember preferences, maintain security, understand use of the Services, measure performance, and improve functionality.
Cookies may be session cookies, which expire when you close your browser, or persistent cookies, which remain until they expire or are deleted. We may use:
- ** Necessary / essential cookies** for authentication and core functionality;
- ** Notice acceptance cookies** to record whether you have accepted cookie notices; and
- ** Functionality cookies** to remember preferences such as language or login settings.
You can instruct your browser to refuse cookies or to notify you when one is sent. Disabling cookies may prevent some parts of the Services from working properly.
7. How We Disclose Information
We may disclose Personal Data in the following circumstances:
- ** Service and technology providers:** hosting, cloud infrastructure, model inference, security, analytics, customer support, communications, and other operational services;
- ** Payment and transaction providers:** payment processing, invoicing, refunds, tax support, fraud prevention, compliance, and chargeback handling;
- ** Integrations you choose:** third-party applications, tools, models, or services that you connect to or direct the Services to use;
- ** Workspace members and the public:** when you collaborate, share, publish, or otherwise make information available according to your settings and actions;
- ** Professional advisers:** auditors, insurers, lawyers, accountants, and consultants subject to appropriate duties of confidentiality;
- ** Affiliates and business transaction parties:** corporate affiliates and parties involved in a proposed or completed financing, merger, acquisition, restructuring, bankruptcy, or sale of assets;
- ** Legal, safety, and compliance recipients:** authorities or other parties where reasonably necessary to comply with law, legal process, or regulatory requests; enforce our terms; protect rights, property, or safety; or detect and prevent fraud, abuse, and security incidents; and
- ** At your direction or with your consent:** for another purpose that you authorize.
8. International Data Transfers
Agent.Space and its Service Providers may process information in countries or regions other than where you live. Data-protection laws in those locations may differ from those in your jurisdiction. Where required, we use recognized transfer mechanisms or safeguards, such as contractual protections, adequacy decisions, or other lawful measures.
9. Data Retention
We retain Personal Data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services; maintain account, transaction, and business records; comply with law; resolve disputes; enforce agreements; and protect security.
Unless a different retention period is expressly stated in an applicable subscription plan, feature description, or service-specific term, we provide standard storage for User Content for up to six (6) months from the date the relevant User Content is first created, uploaded, generated, or otherwise stored through the Services (the “Standard Retention Period”). After the Standard Retention Period expires, User Content may be archived, compressed, de-indexed, restricted, made partially unavailable, or permanently deleted to the maximum extent permitted by law. We do not guarantee that User Content will remain fully accessible, downloadable, exportable, or recoverable after that period. Backup copies may remain temporarily before deletion through ordinary rotation.
We may retain certain records longer when required for tax, accounting, payment, fraud-prevention, security, litigation, or regulatory purposes. When information is no longer required, we will delete or de-identify it in accordance with applicable law and operational procedures.
10. Security
We use commercially reasonable administrative, technical, and organizational safeguards designed to protect Personal Data, including measures appropriate to the nature of the data and risks involved. However, no transmission or storage system is completely secure, and we cannot guarantee absolute security.
We assess suspected Personal Data breaches and notify affected people or regulators when required by applicable law. The timing and content of any notice depend on the applicable requirements and the facts of the incident.
You are responsible for protecting account credentials and API keys, configuring workspace and integration permissions, limiting the data included in prompts and files, and maintaining independent backups where appropriate.
11. Your Privacy Rights and Choices
Depending on your jurisdiction, you may have the right to request access to, correction of, deletion of, or a copy of your Personal Data; restrict or object to processing; withdraw consent; opt out of marketing; request data portability; appeal a privacy-request decision; or make choices relating to certain sales, sharing, targeted advertising, sensitive data, profiling, or automated decision-making. We will provide information about any solely automated decision that has a legal or similarly significant effect on you where required by law.
You may update certain account information or settings through the Services. Other requests may be submitted to support@agent.space. We may verify your identity and authority before completing a request. Authorized agents may submit requests where permitted by law, subject to verification.
Rights may be subject to legal exceptions. We may retain information where necessary for security, fraud prevention, transactions, tax, accounting, recordkeeping, disputes, legal claims, or other legitimate purposes permitted by law. You may also have the right to complain to your local data-protection authority.
12. Marketing Communications
You may opt out of promotional emails by using the unsubscribe link or available account settings. We may still send non-promotional messages relating to your account, transactions, security, or material service changes.
13. Children’s Privacy
The Services are not directed to children below the minimum age required to consent to Personal Data processing in their jurisdiction, and we do not knowingly collect Personal Data from such children without required parental or guardian consent. If you believe a child has provided Personal Data improperly, contact us so that we can investigate and take appropriate action.
14. Third-Party Services and Links
The Services may contain links to or integrations with independent third-party websites, models, applications, or services. Their independent processing is governed by their own policies. Review those policies before providing information or enabling an integration. This does not exclude our applicable obligations for service providers processing data on our behalf or for processing controlled by Agent.Space.
15. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes to the Services, technology, law, or our practices. We will provide notice of material changes through the Services, by email, or by another reasonable method. The updated policy will state its effective date. Where required by law, we will obtain consent before applying a material change.
16. Contact
Questions, concerns, complaints, or privacy-rights requests should be sent to support@agent.space.