Privacy Policy

Effective date: 2026-05-23

This Privacy Policy describes how WebAgent (“we”, “our”, or “the service”) collects, uses, and protects information when you use the application at webagent.live and related interfaces. By using the service you agree to the practices described here.

1. Information we collect

• Account information. When you create an account we store a username, a password hash, and optional profile details such as display name.
• Conversation data. Messages you send to agents, agent responses, tool calls, and related metadata (timestamps, agent identifiers, file uploads) are stored so that conversations persist across sessions.
• Integration credentials. If you connect third-party services (e.g. Google, GitHub, Telegram, LLM providers), we store the tokens or API keys you provide so the agent can act on your behalf. These are scoped to your account.
• Operational data. Standard server logs (IP address, user agent, request paths, error traces) used to operate and secure the service.
• Local browser storage. The web UI uses localStorage for preferences such as theme, panel widths, and an optional “remember me” token. This data lives in your browser, not on our servers.

2. How we use information

• To provide the core service: routing your messages to agents, running tools, and returning results.
• To authenticate you and keep your sessions secure.
• To debug, monitor, and improve the service.
• To enforce our Terms of Service and protect users from abuse.

3. Third-party services

To function, the service sends data to third parties you have configured or that we use as infrastructure. These may include large-language-model providers (such as Anthropic, OpenAI, Google), OAuth providers (Google, GitHub), messaging platforms (Telegram), and our hosting and database providers. Their handling of data is governed by their own privacy policies.

When you send a message to an agent, the message content is transmitted to the LLM provider configured for that agent in order to generate a response.

4. Data storage and security

Account and conversation data are stored in our database. Secrets such as integration tokens are stored with encryption at rest where supported. We take reasonable technical and organizational measures to protect data, but no system is completely secure; you use the service at your own risk.

5. Data retention

We retain account and conversation data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us. Some records may be retained for a limited period to comply with legal obligations or to resolve disputes.

6. Your rights

• Access, correct, or delete the data associated with your account.
• Disconnect integrations at any time from the integrations settings.
• Export your data, subject to reasonable technical limits.
• Withdraw consent or close your account.

To exercise these rights, contact us using the details below.

7. Cookies

We do not use third-party advertising or tracking cookies. The service uses functional browser storage (such as localStorage) only to keep you signed in and to remember UI preferences.

8. Children

The service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children.

9. International users

The service may be operated from, and data may be processed in, jurisdictions other than your own. By using the service you consent to such transfer and processing.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced in-product or by updating the effective date above. Continued use after a change constitutes acceptance of the revised policy.

11. Contact

Questions or requests regarding this policy can be sent to the contact email listed in the application or to the operator of the service.