Privacy Notice

1. Who controls your data

agentlive, the seller of AgentLive, is the data controller for the personal data used to operate this service. This notice covers your account, agents, conversations and browser tasks. Websites you visit and independent providers may process data under their own privacy notices.

2. Data collected and why

Account and profile: email address, authentication information, display name and avatar URL are used to create and secure your account and display your profile. If you choose Google sign-in, we receive the account information needed to sign you in. The legal basis is performance of our contract with you.

Agent and conversation content: agent names, avatars, descriptions, instructions, prompts, conversation history and generated results are stored to deliver the service and maintain context. Browser-task data includes visited website content, session and profile identifiers, task status, progress and interactions. This data is shared with Browser Use to perform your requested tasks. The legal basis is contract performance. Avoid entering sensitive personal data or data you have no right to share.

Browser sessions: cookies and login state for websites you use may persist in your agent’s hosted Browser Use profile so it can stay signed in. Website credentials and information you enter during manual control are subject to the hosted browser provider’s and visited website’s practices. Live browser access is restricted to the agent’s account owner.

Voice: if you enable your microphone, your browser’s speech-recognition service processes spoken input and the resulting text is used as conversation content. Your browser provider may process audio remotely under its own privacy terms. Replies can be read by browser speech synthesis. Microphone access is optional and based on your permission; deny or revoke it in browser settings.

Technical and security data: IP addresses, browser/device information, access timestamps, errors and service logs may be processed by our infrastructure to deliver the service, diagnose problems and prevent abuse. The legal basis is our legitimate interest in a reliable and secure service. Support messages and purchase inquiries, if you provide them, are used to respond to you on the basis of contract performance or our legitimate interest in resolving inquiries. Records required by law are processed to comply with legal obligations.

3. Who receives data

We share only data needed for the relevant purpose with service providers: Lovable Cloud for hosting, authentication and database storage; Browser Use and the AI providers it uses for browser automation and task processing; and providers of infrastructure and support tooling where used. Google Fonts receives technical request information when fonts load. Meta receives advertising measurement data as described in section 7, subject to your cookie choice. Optional Google sign-in and browser speech recognition involve the providers you choose. Website operators receive information your agent or you submit to their sites.

Paddle is our Merchant of Record and receives purchase-related information for product sales, subscription management, payments, tax compliance and invoicing. Paddle processes its own transaction data under Paddle’s Privacy Policy. We may share necessary information with professional legal or accounting advisers, and with authorities when required by law. We do not sell your personal data.

4. Retention and deletion

Account, agent and conversation data is kept while your account is active to provide ongoing conversations. You can delete individual agents or permanently delete your account and associated workspace records in Settings. Deleting an agent also requests deletion of its Browser Use profile. Account deletion removes the application’s account and workspace records; external provider records, browser profiles, security logs and backups may remain subject to those providers’ retention schedules.

We retain data only as long as needed for the stated purpose, legal obligations, security or dispute resolution, then delete or anonymise it. Purchase and tax records may need to be kept for the applicable statutory period. Backups are removed through the provider’s normal retention cycle; deleting workspace data does not erase records a provider must independently retain.

5. Your rights and requests

Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection to processing, and withdraw consent without affecting earlier lawful processing. You may complain to your local data-protection authority. Where UK or EEA GDPR applies, these rights include all of the above and we normally respond within one month, subject to lawful extensions.

You can correct your display name and avatar, and delete your account, in Settings. For other requests, use agentlive’s seller contact details accompanying your Paddle purchase; if you cannot locate them, contact paddle.net to request the seller’s contact details for your transaction. Paddle handles purchase inquiries, not decisions about your AgentLive privacy rights.

6. Security and international processing

We use appropriate technical and organisational measures, including encrypted connections, authentication, access controls and owner-scoped access to workspace data. No internet service can guarantee absolute security; protect your credentials and avoid sharing live browser links.

Our providers may process information outside your country. Where UK or EEA data-transfer rules apply, transfers must use appropriate safeguards, such as adequacy decisions or Standard Contractual Clauses and supplementary protections where necessary.

7. Cookies and browser storage

Essential local storage keeps your sign-in session and theme preference. Interface cookies may remember navigation preferences. Hosted browser sessions also use cookies from websites you visit to preserve their login state.

Advertising measurement (Meta Pixel): to measure how well our Facebook and Instagram ads work, we use the Meta Pixel. It sends Meta (Meta Platforms Ireland Ltd / Meta Platforms, Inc.) the pages you visit on our public site, your browser and device information, IP address, Meta cookie identifiers, and an event when you complete sign-up (identified by an internal account reference, never your email, conversations or agent content). Meta uses this to report ad results and to show our ads to people likely to sign up. In the UK, EU/EEA and Switzerland, the pixel loads only after you click Accept; elsewhere it runs unless you refuse. We store your choice, its date and the notice version in your browser. You can change or withdraw your choice anytime from Cookie settings in the site footer; withdrawal stops further sharing immediately. Meta processes this data under its own Privacy Policy.

You can manage or clear cookies and local storage in browser settings; blocking essential storage may prevent sign-in or reset preferences. Microphone permissions are managed separately in your browser.

8. Changes and related policies

We will publish updates here and provide notice of material changes where required by law. Read our Terms & Conditions and Refund Policy for service and purchase terms.