Privacy Policy

We collect personal information that you voluntarily provide to us when you express interest in our products and Services, participate in activities on the Services, or otherwise contact us. This may include your name, email address, phone number, business or website URL, and payment information processed by our payment provider. We do not process sensitive personal information.

We also automatically collect certain information when you visit or use the Services — such as IP address, device and browser characteristics, operating system, referring URLs, and information about how and when you use the Services (log, usage, and diagnostic data). We may infer approximate region from IP address or account metadata. We do not request precise device-location permission for the first mobile CRM companion release unless a future feature explicitly requires it and this Notice is updated.

We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We process your information only when we have a valid legal reason to do so, and may process it for other purposes with your consent.

Where the GDPR/UK GDPR applies, we rely on consent, performance of a contract, legal obligations, and/or our legitimate interests to process your information. Where Canadian law applies, we process your information with your express or implied consent. You can withdraw consent at any time by contacting us.

We may share your personal information in the following situations:

• –Service providers and processors who perform services on our behalf (see Section 10).
• –Business transfers — in connection with a merger, sale of assets, financing, or acquisition.
• –Affiliates and business partners, subject to this Notice.
• –Legal and safety — where required by law or to protect rights, safety, or the integrity of the Services.

We use cookies and similar technologies (web beacons, pixels) to keep the Services secure, remember preferences, and analyze usage. We may share information with analytics providers such as Google Analytics. You can opt out of Google Analytics at tools.google.com/dlpage/gaoptout.

Parts of our Services are powered by artificial intelligence and machine learning. We provide these through third-party AI service providers (for example, Anthropic and OpenAI). Your input, output, and related personal information may be shared with and processed by these providers to enable the AI features. All such processing is handled in line with this Notice and our agreements with those providers. We do not use your content to train third-party foundation models except as permitted by those providers' zero- or limited-retention terms.

We keep your information only as long as necessary for the purposes set out in this Notice unless a longer period is required or permitted by law (e.g., tax or accounting). When we no longer have a legitimate need to process it, we delete or anonymize it, or securely isolate it until deletion is possible.

We use appropriate organizational and technical security measures to protect your information. However, no transmission over the internet or storage technology is 100% secure, so we cannot guarantee absolute security. You should access the Services within a secure environment.

We do not knowingly collect data from or market to children under 18. By using the Services you represent that you are at least 18, or the parent/guardian of a minor and consent to their use. If you believe we have collected data from a child under 18, contact us at hello@agentsfirst.ai and we will take reasonable steps to delete it.

Service providers that may process information to deliver the Services include Supabase (database/auth), Twilio (calling/SMS), ElevenLabs (voice), Anthropic and OpenAI (AI), Vercel (hosting/observability), Stripe (payments), Google (workspace/analytics), AWS (storage), Inngest (background jobs), and email delivery providers. Each is engaged to process information only to provide their service to us.

Depending on your location (for example the EEA, UK, Switzerland, Canada, or certain US states), you may have rights to access, correct, delete, restrict, or port your personal information, to withdraw consent, and to opt out of targeted advertising, sale of personal data, or certain profiling. To exercise any right, email hello@agentsfirst.ai. We will respond in accordance with applicable law and may need to verify your identity. If we decline a request, you may appeal by replying to our response.

Because no uniform industry or legal standard for recognizing Do-Not-Track (DNT) signals has been finalized, we do not currently respond to DNT browser signals. If a standard is adopted that we must follow, we will update this Notice.

We may update this Notice from time to time. The updated version will be indicated by a revised "Last updated" date. Material changes may be communicated by posting a notice or sending you a direct notification.

When an authorized operator uses the access portal, workspace, or mobile CRM companion, we may process account information, workspace CRM contacts and leads, lead status, tags, notes, booking context, call history and metadata, SMS activity handled through our hosted messaging workflow, assistant prompts, AI SDR run data, diagnostics, and related workspace content.

When an operator starts a foreground call, we may process foreground call audio through the calling provider. Call intelligence and coaching workflows may process call recordings, transcripts, AI call summaries, coaching moments, and review notes when those features are enabled for the workspace.

For the first mobile companion release, we do not request device location, do not use native device SMS, do not request call-log access, and do not import the operator's device contacts. Texting and call history are handled through our hosted Twilio workflow rather than the device's SMS or call-log stack. Push notifications are deferred until a native notification feature and notification preferences exist. Retention and deletion of call recordings, transcripts, summaries, and related workspace content are governed by workspace settings, legal requirements, our support processes, and verified deletion requests sent to hello@agentsfirst.ai. Before any native app-store submission, we review this Notice against the final Apple App Privacy and Google Play Data Safety answers.

If you have questions about this Notice, or want to review, update, or delete information we hold about you, contact us at hello@agentsfirst.ai.