Privacy Policy

Effective 15 November 2026

This policy explains what personal data AgentBeeper collects, why, who else handles it and how long it is kept. AgentBeeper is operated by Profitonium Apps Ltd ("we", "us"), the controller of this data. Contact us at hello@profitoniumapps.com.

1. What we collect and why

• Sign-in. You sign in through Clerk, which holds your email address and sign-in details. We store the user id Clerk gives your account, to know which account is yours.
• Your phone. Your phone number, verified with an SMS code, so that we can call you. A salted hash of the PIN you choose, which protects changing the number and deleting the account. We never store the PIN itself.
• Your computers. For each computer you connect: a random installation id, a label such as the computer's name, and its device key, which we store only as a hash.
• Agent events. When an agent needs you or finishes, your computer sends the kind of event, the agent, a short summary or the question the agent asked, and the time. We use them to decide whether to call and to brief you on the call, and keep each summary at most seven days.
• During a call. The list of open sessions on your connected computers (session titles, their state and the names of projects you opted in), so the voice assistant can tell you about them. It is deleted ten minutes after the call's last update. A reply or task you confirm with key 1 is passed to your computer; its text is erased once your computer reports the result or the command expires, and the record of it is deleted after seven days.
• Calls. The time, status and length of each call, the carrier's call id, and the amount of voice processing it used, to count your minutes. These records are deleted seven days after the call; the total minutes used in the current month are kept for the month.
• Billing. If you subscribe, Stripe takes your payment. We keep your Stripe customer and subscription ids, the plan, its status and its billing period. We never see your card number.
• Your settings. Call preferences such as quiet hours, time zone, daily cap and which finished runs ring you.
• Technical data. Like any internet service, our hosting provider sees the IP address of each request and keeps short-lived logs to run and secure the service.

File paths, session ids, your code, terminal contents and your agents' output stay on your computer. AgentBeeper never sends them to us.

2. Phone calls and the voice assistant

Call audio passes through Twilio and is streamed to OpenAI's Realtime API, which runs the voice assistant. We do not record calls and do not keep transcripts. OpenAI does not use data sent through its API to train its models, and may keep it for up to 30 days to detect abuse, under its own terms.

3. Legal bases

Where data protection law such as the UK or EU GDPR applies, we process this data to perform our contract with you (running the service and billing), for our legitimate interests in keeping the service secure and preventing abuse (such as limits per phone number), and to meet legal obligations (such as keeping billing records).

4. Who else handles your data

We share data only with the providers that run AgentBeeper, each for its part of the service:

• Cloudflare, Inc. hosts the service and stores account data.
• Clerk, Inc. handles sign-in.
• Twilio Inc. places calls and sends verification SMS.
• OpenAI, L.L.C. runs the voice assistant during calls.
• Stripe, Inc. takes payments.

These providers may process data in the United States and other countries. Where the law requires it, transfers are covered by appropriate safeguards such as standard contractual clauses. We do not sell your data, use it for advertising, or use it to train AI models.

5. Security

Each account's data is stored encrypted, separately from every other account. Keys and PINs are stored only as hashes. Your computer decides every command itself, so the service alone cannot run anything on it.

6. Deleting your account

Run agentbeeper delete-account to delete your account: your phone number, PIN hash, keys, settings, events and call records. To stop the minutes limit being reset by signing up again, we keep one record of the minutes used in the current month until it ends, and the day's count of verification texts per phone number, in a hashed form, until that day ends. Deleting the account also cancels a Pro subscription. Your sign-in profile is held by Clerk; email us to have it deleted too. Stripe keeps payment records as the law requires.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to or restrict how we process it. Email hello@profitoniumapps.com and we will answer within one month. You can also complain to your local data protection authority, such as the Information Commissioner's Office in the United Kingdom.

8. Children

AgentBeeper is not for anyone under 18, and we do not knowingly collect their data.

9. Changes

We may update this policy. We will post the new version here with a new effective date, and tell you about material changes before they apply.