Delegate runs AI agents that work inside the tools you connect. To do that job it has to handle some of your data. This policy explains, in plain words, what we process, why, and how you stay in control of it.

What we process

• Account details: your name, work email, company name and billing details.
• Workspace data: the briefs you write, the agents you set up, approval rules and the run history of every task.
• Connected tool data: only what an agent needs to finish a task you gave it, through the access you granted (for example the tickets in a Zendesk view or the invoices in Stripe).
• Product analytics: basic usage events and crash reports, so we can fix bugs and improve the product.

Your data never trains models

We never use your workspace data or connected tool data to train AI models, ours or anyone else's. The model providers we work with process requests for us only, under contracts that forbid training on your data and require deletion after processing.

Who helps us run Delegate

A short list of subprocessors helps us provide the service: cloud hosting, AI model providers, email delivery, payments and error tracking. Each one may only use your data to provide that service to us. The current list is available on request.

Security

• Data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
• Every agent works with scoped, revocable OAuth access; you can disconnect a tool at any time.
• Every action an agent takes is written to an audit log you can export.
• We are SOC 2 Type II audited every year and GDPR compliant.

How long we keep it

We keep workspace data while your account is open. Run history is kept for the period your plan includes. Connected tool data an agent reads during a task is not stored beyond the run record. If you close your account, everything is erased within 30 days, including backups.

Your rights

• Export your workspace data from Settings → Workspace → Export.
• Correct or delete personal data by asking us, or delete your whole workspace from Settings.
• Object to or restrict processing, and complain to your local data protection authority.

Contact

Questions about your data go to our team by email. We reply within one working day.