Privacy Policy

AgentCore (“we,” “us,” “our”) is an AI agent platform accessible at agentcore.cc. This Privacy Policy explains how we handle personal information when you use our platform.

For privacy questions, contact us at privacy@agentcore.cc.

Account information. When you create an account, we collect your email address and a display name. Passwords are hashed using industry-standard bcrypt and never stored in plaintext.

Agent configurations. Names, descriptions, personality settings, and system prompts you create for your agents are stored and associated with your account.

Training data. Text snippets and documents you upload to train your agents. This content is sent to our AI infrastructure provider (OpenAI) for indexing and retrieval.

Chat messages. Messages sent through your embedded chat widget are processed in real time to generate responses. We do not currently persist conversation history.

Usage data. Standard web server logs including IP address, browser type, pages visited, and timestamps. We use this to monitor performance and security.

We use your information solely to operate and improve AgentCore. Specifically:

• To authenticate you and secure your account
• To run your agents and process chat messages via our AI providers
• To index and retrieve your training data in response to user queries
• To send transactional emails (account creation, password reset)
• To detect abuse and maintain platform security

We do not sell your data. We do not use your data to train AI models without explicit consent. We do not send marketing emails without your opt-in.

AgentCore uses the following third-party services to function:

• OpenAI — Powers our AI inference and training data retrieval. Messages and training data you provide are processed by OpenAI's models in accordance with their Privacy Policy.
• MongoDB Atlas — Hosts our database. Your account and agent data are stored on MongoDB-managed infrastructure.

We contractually require all sub-processors to maintain appropriate data security and use your data only to provide services on our behalf.

We retain your data for as long as your account is active. When you delete your account:

• Your profile, agents, and training data are permanently deleted from our database within 30 days
• Training data uploaded to OpenAI vector stores is deleted within 30 days of account closure
• Server logs may be retained for up to 90 days for security purposes

We use session cookies strictly to keep you logged in. We do not use third-party advertising trackers, cross-site tracking pixels, or analytics beyond basic server-side request logging.

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — update inaccurate information via your account settings
• Deletion — delete your account and all associated data from your settings page
• Portability — request an export of your agent configurations and training data

To exercise these rights, email privacy@agentcore.cc. We respond within 30 days.

We implement reasonable technical and organizational security measures including TLS in transit, hashed passwords, access controls, and periodic security reviews. No system is perfectly secure — please use a strong, unique password and contact us immediately if you suspect unauthorized access.

AgentCore is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has created an account, contact us and we will delete it promptly.

We may update this policy as the product evolves. We'll notify you by email or in-app notice before any material changes take effect. The “Last updated” date at the top reflects the most recent revision.