Privacy
Agency runs on your machine. Your projects, conversations and credentials stay there. Agency has no account system and no server of its own that receives your work.
What Agency stores on your computer
- Projects, teams and conversations. Session transcripts, inboxes, workflows and preferences are written to the
.agencyfolder in your home directory. They are not uploaded anywhere by Agency. - Credentials you add in Settings. API keys for OpenRouter, the optional Telegram token and the optional usage key are encrypted with the operating system's credential protection (Electron safeStorage). Agency never writes them to disk in plain text.
- Native sign-ins. Claude and Codex connect through their own command-line tools and their own login flows. Those credentials belong to those tools; Agency does not read, copy or export them. Sign-in output shown during setup is kept in memory only and cleared when sign-in finishes.
What leaves your computer
- Requests to the model providers you choose. When an agent works, its prompts and your project files that it reads are sent to the provider behind that agent's model: Anthropic for Claude, OpenAI for Codex, OpenRouter for the models it routes. Ollama runs locally and sends nothing. Each provider's own terms and privacy policy govern that traffic and any charges.
- Optional usage reads. If you enable usage meters, Agency contacts the provider's usage endpoints with the key you supplied. The Claude meter only reads the percentage and reset time that Claude's own status line exposes locally; Agency does not extract login tokens or start a conversation to obtain usage.
- Optional Telegram notifications. Only if you configure them, and only the notifications and test messages you asked for.
- Managed tool downloads. When you ask Agency to install a missing command-line tool, it downloads the pinned version from the official source shown to you beforehand and verifies its size and hash before activating it.
Diagnostics
A diagnostics export exists so you can share a report with us if something goes wrong. It contains application and runtime versions, platform, settings schema, credential-store availability, theme and session count. It never contains project paths, repository files, prompts, transcripts or credentials. You see the report before it is saved, and nothing is sent automatically.
Updates
Signed releases check for updates and download them separately; installation happens only when you choose it and only after your running sessions are finished. The updater fetches release packages, never source code, and does not run package managers on your machine.
This website
agency-online.com is a static site served by Firebase Hosting. It sets no cookies and runs no analytics. The only third-party request the page makes is for its typefaces from Google Fonts, which receives your IP address as part of that request. Firebase Hosting keeps standard server access logs as described in Google's privacy policy.
Who is responsible
Agency is made by BusyMonkeys. This page describes what the current release does; it will be updated when the behaviour changes.