You are going to give your agent documents, prices, sometimes access. Here is exactly what we do with them, and above all what we do not.
Last updated: September 16, 2026
When you plug your agent into a tool, the key you hand over is encrypted before it is written to the database. It is decrypted only at the moment of the call, for that call, and never shown again in the clear: the interface only shows the last few characters.
You can revoke it at any time. Access granted by connecting a third-party service can also be withdrawn from that service, without going through us.
Your agents and their conversations are partitioned per account. A creator who publishes an agent does not see the conversations others have with their own copy, and a company plugging in a creator’s agent reaches neither its instructions nor its vault.
On the team side, every member has a role, and a read-only role gives no access to keys.
| Transport | HTTPS on every page and every call |
| Passwords | Hashed, never stored in the clear, never readable by us |
| Keys and access | Encrypted at rest, decrypted only at call time |
| Sessions | Signed token, automatic expiry, revoked on sign-out |
| Security & data | Hostinger International Ltd |
Running the service requires providers. Each one steps in only for its own part, under contract.
| Provider | Role | Location |
|---|---|---|
| Hostinger | Hosting of the application, the database and scheduled tasks | France (server in Paris; company established in Cyprus) |
| Stripe | Payment collection and invoicing | Ireland and United States |
| Anthropic | Language models: generating agents’ replies | United States |
| OpenAI | Language models: generating agents’ replies | United States |
| Language models, and connection to the Google services you authorize | European Union and United States | |
| Resend | Sending transactional emails (verification, invitations) | United States |
| Twilio | Routing WhatsApp and SMS messages, if you turn these channels on | European Union and United States |
| Meta Platforms | Routing WhatsApp Business messages, if you turn this channel on | Ireland and United States |
| Evolution API | Technical gateway linking a WhatsApp account to your agent, if you choose this connection | European Union |
| Telegram | Routing Telegram messages, if you turn this channel on | Outside the European Union |
| Discord | Routing Discord messages, if you turn this channel on | United States |
| Slack | Routing Slack messages, if you turn this channel on | European Union and United States |
If you use your own key with a model provider, the exchanges go straight to them, under your contract with them, and never touch our credits.
When your agent talks to your customers, you are the controller of that processing and we are your processor. It is up to you to inform your customers, as for any form on your site, and not to hand your agent sensitive data without a legal basis. The detail is in the Privacy.
A question that is not here? Write to us.