Your business data is yours. This policy explains what AgentOS collects, how we use it, who we share it with, and the rights you have over it. We do not sell personal information for money. We do use advertising cookies on our marketing site, and you can opt out any time on our Your Privacy Choices page.
AgentOS is a software platform for real estate professionals, operated by a North Carolina company. This policy covers our marketing website (getagentos.io), the AgentOS application (app.getagentos.io), our mobile app, and the public pages our customers share through the platform, such as client portals, offer submission pages, showing booking pages, open house sign-in pages, and seller reports.
AgentOS handles personal information in two different roles, and your rights work differently under each.
Data we control. For your account information, billing records, support communications, product usage analytics, and marketing website visits, AgentOS decides how and why the data is used. We are the "business" or "controller" for this data, and you can exercise the rights in Section 9 directly with us.
Data we process for our customers. When an agent or brokerage uses AgentOS to store contacts, transactions, documents, messages, showing records, open house sign-ins, homeowner portals, or survey responses, that customer is the controller of the information and AgentOS is their service provider or "processor." We use that data only to provide the platform, under our Data Processing Addendum. If you are a home buyer, seller, or client of an agent who uses AgentOS and you want your information accessed, corrected, or deleted, please contact that agent or brokerage; we support them in honoring your request, and if you contact us directly we will forward your request to them.
Account information: name, email address, phone number, organization name, role, profile photo, and password credentials (stored as salted hashes).
Customer content: the information you and your team put into the platform, including contact and lead records, transaction and property details, uploaded documents (for example compliance paperwork such as executed contracts and disclosures), notes, tasks, messages, showing and open house records, expense records and receipts, and marketing materials. This content can include personal information about your clients.
Voice recordings: if you use voice memo features, we process your recording to transcribe it (see Section 6). Recordings are processed to provide the feature and are not used for any other purpose.
Payment information: subscriptions are processed by Stripe. We receive your plan, billing status, and the last four digits and brand of your card. Full card numbers never touch our servers.
Usage and device information: log data, IP address, browser and device type, pages viewed, features used, and in-app events, collected through first-party logging and PostHog analytics.
Marketing and advertising data: on our marketing website, cookies and pixels (including the Meta pixel) collect device identifiers, pages viewed, and campaign parameters such as UTM tags and click identifiers, so we can measure campaigns and show relevant ads.
Integration data: if you connect Google Drive, OneDrive, or Dropbox, we access only what is needed to provide the integration you asked for, under each provider’s consent flow.
We do not intentionally collect sensitive categories of personal information such as government identifiers, health information, biometric data, or precise geolocation, and we ask that you not upload them except where a real estate document genuinely requires it.
We collect information directly from you, automatically from your use of the platform and website, from your teammates within your organization, from public pages you share with your clients, from integrations you connect, and from service providers such as Stripe and advertising platforms that tell us how you found us.
We use information to: (a) provide, maintain, and secure the platform; (b) set up and manage accounts, teams, and roles; (c) process subscriptions and billing; (d) provide support and respond to inquiries; (e) send transactional notifications you and your team configure, such as deadline reminders and compliance review alerts; (f) send product and marketing emails, which you can opt out of at any time; (g) measure and improve the product through analytics; (h) provide AI-assisted features as described in Section 6; (i) advertise AgentOS, including retargeting, subject to your opt-out rights; and (j) comply with legal obligations and enforce our terms. We do not use your data for automated decisions that produce legal or similarly significant effects about you.
Some features use artificial intelligence, including the REx assistant, document term extraction, voice memo transcription, and AI-generated insights. To provide these features, the relevant content (for example a contract PDF you upload for extraction, or a voice memo you record) is processed by our AI providers: Anthropic for language features and OpenAI for voice transcription. Under our agreements with these providers, content submitted through their business APIs is not used to train their models. AI outputs can be inaccurate and are drafts for your review, not professional advice.
We do not sell personal information for money. We share information only as described here.
Service providers. Companies that process data on our behalf, limited to what their function requires: Vercel (web hosting), Supabase (database, authentication, and file storage), Cloudflare (network and inbound email routing), Stripe (payments), Brevo (email delivery), GoHighLevel (text message delivery), PostHog (product analytics), Anthropic and OpenAI (AI features, Section 6), PDFShift (PDF generation), RentCast, HasData, and Scrapfly (property and listing data lookups), and Apple and Google (mobile push notifications and sign-in). Service providers are bound by contracts that restrict their use of your data.
Advertising partners. Our marketing website uses the Meta pixel and related tools to measure our ads and show ads to people who visited our site. This shares limited website visitor data (device information, pages viewed, and campaign identifiers) with Meta Platforms. Some state laws treat this as a "sale" or "sharing" of personal information, or as "targeted advertising." You can opt out at Your Privacy Choices, and we honor the Global Privacy Control browser signal. We do not run advertising trackers inside the logged-in application.
Within your organization. Your name and activity are visible to your team according to your organization’s roles, and team leads and administrators can see organization data, including documents submitted for compliance review.
At your direction. When you share a portal link, send an offer page, publish a OnePage site, embed public social posts, or connect an integration, the recipients and providers you chose receive the relevant data.
Legal and safety. We may disclose information to comply with law, respond to lawful requests, protect rights and safety, or in connection with a merger, acquisition, or sale of assets, in which case this policy continues to apply until updated.
The application uses cookies and local storage strictly for sign-in sessions and preferences. The marketing website additionally uses PostHog for analytics and the Meta pixel for advertising, as described in Section 7.
Opt-out signals: we honor the Global Privacy Control (GPC) signal and browser Do Not Track as an opt-out of advertising sharing on our websites: when either signal is present, the advertising pixel does not load. You can also opt out manually on Your Privacy Choices. Blocking all cookies in your browser may prevent sign-in from working.
Wherever you live, we extend the same core rights to you for data we control: you may access a copy of your personal information, correct inaccurate information, delete your information, receive a portable copy, and opt out of targeted advertising. We do not discriminate against you for exercising any right.
How to exercise rights: email support@getagentos.io from the email address on your account (or with enough information for us to verify you), or use the in-app account tools: profile editing, data export, and account deletion are built in. Authorized agents may submit requests on your behalf with proof of authorization. We respond within 45 days and will tell you if we need a 45-day extension.
Appeals: if we decline a request, you may appeal by replying to our decision with the word "Appeal" in the subject line. We answer appeals within 60 days. If you are unsatisfied, you may contact your state attorney general.
California notes: the categories we collect are listed in Section 3, our sharing is described in Section 7, and our advertising opt-out satisfies the "Do Not Sell or Share My Personal Information" requirement via Your Privacy Choices and GPC. We do not knowingly sell or share personal information of consumers under 16, do not use sensitive personal information beyond permitted purposes, and do not offer financial incentives in exchange for personal information. We do not disclose personal information to third parties for their own direct marketing.
Client data held for an agent: as explained in Section 2, requests about data an agent or brokerage stores in AgentOS are forwarded to that customer, who decides them as controller.
We keep your data while your account is active. After account deletion, data is retained for up to 30 days to allow account recovery and transition, then permanently deleted; backup copies age out over an additional 30 days. Billing records are kept as required by tax and accounting law. Compliance documents, activity logs, and other customer content follow this same schedule; export anything you need before deleting your account.
We use industry-standard safeguards: encryption in transit and at rest, role-based access controls with row-level database security, private document storage with short-lived signed links, salted password hashing, optional multi-factor authentication, and monitoring. No system is perfectly secure. If a breach affects your personal information, we will notify you and any affected customer (as controller) consistent with applicable breach notification laws in all U.S. states.
AgentOS is operated from the United States and our service providers process data in the United States. If you use AgentOS from outside the U.S., you understand that your information is processed in the U.S.
AgentOS is a business tool. It is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us personal information, contact us and we will delete it.
AgentOS can display publicly available social media posts, including Facebook and Instagram posts, on client-facing seller reports using Meta’s official oEmbed API. This retrieves only public post content (such as images, text, and engagement counts) for display. We do not collect, store, or retain personal data from Meta users through this feature and do not request access to private account information. To request removal of embedded content, email support@getagentos.io.
We may update this policy as the product and the law evolve. We will post the new version here with an updated date, and for material changes we will also notify you by email or an in-app notice before the changes take effect.
Questions about your privacy, or want to exercise a right? Reach us at support@getagentos.io. See also our Terms of Service, our Data Processing Addendum, and Your Privacy Choices.
Join hundreds of agents who replaced chaos with clarity. Setup takes five minutes. Results start immediately.
7-day free trial · no credit card · 5-minute setup