Privacy Policy

• Account data — your email address and workspace membership (we use passwordless magic-link sign-in, so we store no passwords).
• Agent configuration — the agents you create, their instructions, allowed tools, and schedules.
• Run data — the tasks you submit, run transcripts (what the agent did and produced), agent memory you choose to keep, and credit usage.
• Connected-tool data — data from accounts you explicitly connect (see section 02), accessed only while performing your tasks.
• Billing data — purchase history and credit balance. Payments are handled by Stripe; we never receive your full card number.
• Technical data — logs and identifiers needed to keep the Service secure and reliable.

Agents can only reach tools you deliberately connect through our managed-authorization provider (Composio). When you connect an account, you grant scoped access via that provider’s OAuth flow; we store a connection reference, not your password.

For Google services (such as Gmail, Google Calendar, or Google Sheets): we access Google user data only to perform the specific tasks you direct an agent to run — for example reading recent messages to summarize your inbox, or drafting a reply for your approval. We do not use Google user data for advertising, we do not sell it, we do not use it to train AI or machine-learning models, and no humans at Crestview read it except with your consent, for security or abuse investigation, or as required by law.

Crestview’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect any tool from the dashboard at any time, or revoke access directly in your Google account settings; disconnection stops all further access.

• to execute the agent tasks you request and show you what happened;
• to meter usage, maintain your credit balance, and process purchases;
• to secure the platform — isolation between workspaces, abuse prevention, debugging;
• to communicate with you about the Service (sign-in links, approvals, receipts).

We do not sell personal data, we do not use your content or connected-account data for advertising, and we do not use it to train AI models.

We share data only with the subprocessors that operate the Service, each bound to use it solely to provide their service to us:

• Supabase — database, authentication, and storage for your workspace data.
• Vercel — hosting for the web application.
• Render — hosting for the agent runtime that executes your tasks.
• Anthropic — the large language models that power agents (API; not used to train their models).
• Composio — managed authorization and tool calls for the accounts you connect.
• Stripe — payment processing (we never see or store full card numbers).
• Inngest — queueing and orchestration of agent runs (job identifiers only, not your content).

Beyond these, we disclose data only if required by law, to protect the Service and its users, or as part of a business transfer (with notice).

Run transcripts are retained for 30 days and then deleted automatically. Agent memory and configuration persist until you delete them or close your account. Account and billing records are kept as long as legally required.

Each workspace is isolated at the database layer (row-level security), agent runs execute in isolated, wiped-after-use environments, credential-shaped strings are redacted from stored transcripts, and data is encrypted in transit and at rest by our infrastructure providers. No system is perfectly secure, but isolation is designed in, not bolted on.

You can access your data in the dashboard, disconnect tools at any time, and request a copy or deletion of your data by emailing us. Depending on where you live (for example the EEA, UK, or California), you may have additional rights — access, correction, deletion, portability, objection — which we honor on request. We do not discriminate for exercising them.

The Service is for adults 18 and over. We do not knowingly collect data from children.

We will post any changes here and, for material changes, notify you before they take effect. Questions or requests: crestviewconsultingfl@gmail.com.