Privacy
Agency runs on your machine. Your projects, conversations and credentials stay there. You need an Agency account to download the app; that account holds only what is listed below. Agency has no server of its own that receives your work.
What Agency stores on your computer
- Projects, teams and conversations. Session transcripts, inboxes, workflows and preferences are written to the
.agencyfolder in your home directory. They are not uploaded anywhere by Agency. - Credentials you add in Settings. API keys for OpenRouter, the optional Telegram token and the optional usage key are encrypted with the operating system's credential protection (Electron safeStorage). Agency never writes them to disk in plain text.
- Native sign-ins. Claude and Codex connect through their own command-line tools and their own login flows. Those credentials belong to those tools; Agency does not read, copy or export them. Sign-in output shown during setup is kept in memory only and cleared when sign-in finishes.
What leaves your computer
- Requests to the model providers you choose. When an agent works, its prompts and your project files that it reads are sent to the provider behind that agent's model: Anthropic for Claude, OpenAI for Codex, OpenRouter for the models it routes. Ollama runs locally and sends nothing. Each provider's own terms and privacy policy govern that traffic and any charges.
- Optional usage reads. If you enable usage meters, Agency contacts the provider's usage endpoints with the key you supplied. The Claude meter only reads the percentage and reset time that Claude's own status line exposes locally; Agency does not extract login tokens or start a conversation to obtain usage.
- Optional Telegram notifications. Only if you configure them, and only the notifications and test messages you asked for.
- Managed tool downloads. When you ask Agency to install a missing command-line tool, it downloads the pinned version from the official source shown to you beforehand and verifies its size and hash before activating it.
Your Agency account
You sign in with GitHub, Google, or an email address and password before downloading Agency.
- What we collect. Your email address, the user ID your sign-in provider (GitHub or Google) gives us, and your display name if that provider sends it. For email sign-in we also keep whether your email is verified; your password is stored only as a one-way hash by our sign-in service and is never visible to us. We do not receive your GitHub or Google password, repositories, contacts or files.
- Why. To give you access to downloads and to protect them from abuse. When Agency adds sign-in inside the app, the same account will be used there; we will update this page before that happens.
- Download records. Each download request records your account ID, the platform you chose and the time. Requests are limited per account and per IP address to prevent abuse.
- Who processes it. Accounts are handled by Firebase Authentication, a Google Cloud service, which also processes your IP address and browser details to run sign-in and stop abuse. If you choose GitHub or Google, that company also knows you signed in to Agency.
- How long we keep it. Your account data is kept while your account exists. Download records are kept for 30 days, then deleted automatically.
- Deleting your account. Email support@agency-online.com from the address on your account, or name the GitHub or Google account you used. We delete your account and its download records within 30 days and confirm by email. You can also ask what we hold about you or ask us to correct it the same way.
Diagnostics
A diagnostics export exists so you can share a report with us if something goes wrong. It contains application and runtime versions, platform, settings schema, credential-store availability, theme and session count. It never contains project paths, repository files, prompts, transcripts or credentials. You see the report before it is saved, and nothing is sent automatically.
Updates
Signed releases check for updates and download them separately; installation happens only when you choose it and only after your running sessions are finished. The updater fetches release packages, never source code, and does not run package managers on your machine.
This website
agency-online.com is a static site served by Firebase Hosting. It sets no cookies and runs no analytics. Its pages request their typefaces from Google Fonts, which receives your IP address as part of that request. The sign-in page also talks to Firebase Authentication and, if you choose them, to GitHub or Google. While you are signed in, your browser keeps the sign-in session in its storage for this tab only; it is removed when you close the tab or sign out. Firebase Hosting keeps standard server access logs as described in Google's privacy policy.
Who is responsible
Agency is made by BusyMonkeys. This page describes what the current release does; it will be updated when the behaviour changes.