Legal
Privacy Policy
How Devcore collects, uses and shares information when you use AgentOS.
Summary
We use your workspace content to run AgentOS for you. We do not sell it, we do not use it for advertising, and we do not use it to train AI models. To answer your requests we send content to the AI model providers and other services listed below.
What we collect
- Account details: your name and email address, from sign-in through WorkOS.
- Workspace content: chats, tasks, documents, records, files, apps, and the activity around them.
- Data from apps you connect: see the next section.
- Billing details: your plan and payment status. Card details are handled by Stripe; we do not store card numbers.
- Usage events: which features are used, such as a message sent or setup completed, tied to your account.
Apps you connect
Nothing is read from another service until you connect it, and you can disconnect it at any time.
- Gmail: AgentOS reads your email to find work, people and follow-ups. It can draft email, and email is sent only after you approve it. The connection runs through Composio.
- Google Calendar: read-only access to your events.
- Google Drive: the files you choose to sync.
- Slack: AgentOS reads messages in the channels you grant and can post replies there. Messages are stored so agents can find them later. When a message is deleted in Slack, we keep only a record that it existed, without its text.
- Meeting recording: when you send the AgentOS recorder to a meeting, Recall.ai captures the audio, video, transcript and participant names.
- Others, such as GitHub, Fireflies or Granola: the data that connection allows, only after you connect it.
Content from email, meetings and Slack is processed by an AI model to pull out facts, such as who owes what, and is indexed for search inside your workspace.
AgentOS's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
How we use information
- To provide AgentOS: answering requests, running your agents and apps, search, and sync.
- To keep it secure and working: preventing abuse and fixing problems.
- To bill you.
- To understand how AgentOS is used and improve it, using usage events rather than your content.
- To measure our advertising: we send OpenAI Ads conversion events such as sign-up, setup completed and payment, with a hashed email address and account ID. Hashing is not anonymization. We never send your prompts, messages, documents or connected-app data for this.
AI processing and training
To answer a request, AgentOS sends the relevant content (your message, the context an agent needs, and tool results) to an AI model. Most requests go through OpenRouter to the provider of the model in use, such as OpenAI, Anthropic, Google, Moonshot AI, DeepSeek or Z.ai. OpenAI also creates the search embeddings for your content and transcribes voice. Typesafe scores some yes-or-no decisions, such as whether an email needs a reply. Perplexity runs agents' web searches. If you link your own Claude or ChatGPT account to the coding tools, those requests go to that provider under your account.
We do not train AI models on your content. Each model provider handles requests under its own terms, and some keep request data for a short time to monitor abuse.
Who receives data
We share data only with the services that help us run AgentOS, and only what each needs:
- Amazon Web Services: hosting for the application and database (United States).
- Cloudflare: file storage (R2).
- OpenRouter and the model providers named above: AI processing.
- OpenAI: embeddings, voice transcription, and advertising measurement as described above.
- Typesafe: yes-or-no decisions about email, messages and workflow steps, such as whether an email needs a reply, sent directly and through OpenRouter.
- Perplexity: web searches agents make, and research on the website you add during setup, through OpenRouter.
- WorkOS: sign-in.
- Stripe: payments.
- Composio: the connection to Gmail, Google Drive and other connected apps, including their access tokens.
- Configure (configure.dev): importing your preferences and memories from other AI assistants, when you connect it.
- Recall.ai: meeting recording, when you use it.
- E2B and Cua (Maritime): isolated computers where agents run code and browse the web.
- AgentMail: sending workspace invitations.
- PostHog: product usage events.
- Google: visit counts on our marketing pages (Google Analytics), service configuration records (Google Cloud), and the icons of websites shown in AgentOS, for which it receives only each website's address.
- treg.to: company and contact lookups, when you or an agent run one.
We may also disclose information if the law requires it, or as part of a merger or sale of the business, in which case this policy continues to apply.
Retention
Workspace content, connected-app data and chat history are kept while your workspace exists, so agents can use them. Some items are deleted sooner: transfer files after 14 days, and incoming app webhook records after 7 days.
To delete your account or workspace, write to hello@devvcore.com. We then delete the workspace content from our systems. Backups and our providers' copies are removed on their normal schedules.
Cookies
Once you are signed in, AgentOS sets only the cookies needed to keep you signed in, with two exceptions: one short-lived cookie right after you sign up, so the sign-up is counted once, and the OpenAI advertising references described below when you arrive from an ad. Our marketing pages use Google Analytics and PostHog to count visits.
Our public pages (the website, pricing, sign-up, sign-in and legal pages), the first page you see after following an ad, and the first page after you sign up use OpenAI's measurement Pixel. It sets the first-party __oppref and __obref cookies, which stay in your browser after you sign in, and reports page views and your sign-up to OpenAI Ads. To opt out, turn on Global Privacy Control or Do Not Track in your browser: we then tell the Pixel you have not consented, it clears those cookies, and we send OpenAI Ads nothing about you.
Your choices and rights
You can see and edit your content in AgentOS, disconnect any app, and remove people from your workspace. You can ask us for a copy of your data, to correct it, or to delete it by writing to hello@devvcore.com. Depending on where you live, you may have more rights under local law, such as the right to object or to complain to a data protection authority.
Children
AgentOS is for work and is not meant for anyone under 16.
Changes
If we change this policy in a way that matters, we tell you before the change takes effect.
Contact
Privacy questions: hello@devvcore.com.
