Information We Collect

We collect information needed to operate and secure Agent Jam.

• Account details such as name, email address, and login method
• Workspace data, including chats, prompts, responses, files, and settings
• Encrypted API keys and authentication tokens you provide
• Connected account details, including integration provider, granted scopes, and account identifiers
• Action and event logs, such as integration calls, timestamps, request metadata, and error traces
• Device and usage data, including IP address, browser type, and diagnostics
• Billing and subscription records from our payment processors (we do not store full card numbers)

How We Use Your Data

We use your information to:

• Provide and maintain the Agent Jam platform and features
• Execute your instructions, including calls to AI models and connected third-party integrations
• Personalize your experience and remember your configuration
• Monitor reliability, troubleshoot issues, and prevent abuse
• Support billing, accounting, and service communications
• Comply with legal obligations and enforce our agreements

Connected Integrations and Authorized Access

Agent Jam supports third-party integrations. If you connect an integration, you authorize Agent Jam to access and process data from that account according to the permissions (scopes) you grant and the instructions you provide in the product.

• Access can include reading account data, files, records, messages, or metadata available under granted scopes
• Access can include writing, updating, deleting, sending, or triggering actions in the connected third-party service when you request those actions
• We may process and temporarily store integration inputs and outputs needed for execution, safety, logs, retries, and auditability
• You can revoke access at any time in Agent Jam or with the third-party provider, subject to provider-side controls and delay

You are responsible for reviewing permissions before connecting an account and for ensuring you are authorized to grant that access.

AI Model and Service Providers

To deliver Agent Jam, we use service providers such as model hosts, infrastructure providers, analytics services, and payment processors. These providers may receive relevant data to perform services on our behalf under their own terms and privacy policies.

API Key and Token Security

Credentials you store with us are encrypted in transit and at rest. We use those credentials only to authenticate permitted requests on your behalf. No system is perfectly secure, and you should rotate keys and revoke tokens if you suspect compromise.

Data Retention

We retain personal data for as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods depend on data type and account status.

When you delete data or disconnect integrations, we delete or de-identify data within a reasonable period, except where retention is required for legal, security, fraud-prevention, or legitimate business reasons.

Your Choices and Rights

Depending on your location, you may have rights to:

• Access, correct, or delete your personal data
• Object to or restrict certain processing
• Request export/portability of your data
• Withdraw consent where processing is consent-based

You can also disconnect integrations, revoke provider permissions, and remove API credentials from your settings.

Legal Bases for Processing

Where required by law, we process personal data under one or more legal bases, including: performance of a contract, legitimate interests (such as security and service improvement), consent, and legal obligations.

Controller and Processor Roles

Agent Jam generally acts as a controller for account, billing, security, and product analytics data. For customer workspace content processed on behalf of a business customer, Agent Jam may act as a processor or service provider, depending on applicable law and contract terms.

Data Processing Addendum (Business Customers)

If you use Agent Jam on behalf of a business and require processor terms, you may request our Data Processing Addendum (DPA) via hello@boilingkettle.co. Our DPA is intended to address processor obligations, security measures, and subprocessor commitments.

International Transfers

Agent Jam and our providers may process data in countries other than your own. Where required, we implement contractual and organizational safeguards for cross-border transfers.

For restricted transfers, we rely on appropriate transfer mechanisms such as Standard Contractual Clauses and related safeguards where required by applicable law.

U.S. State Privacy Disclosures

Where applicable U.S. state privacy laws apply, you may have rights to know, access, correct, delete, and obtain a copy of personal information, and to appeal denials of rights requests.

We do not sell personal information for money. We may share personal data with service providers and integration partners to provide the service as described in this Policy.

EEA/UK/Switzerland Privacy Disclosures

If you are in the EEA, UK, or Switzerland, you may have rights to access, rectification, erasure, restriction, objection, portability, and withdrawal of consent where processing is based on consent.

You may also lodge a complaint with your local supervisory authority. We encourage you to contact us first so we can try to resolve your concern.

Automated Processing and Decision Support

Agent Jam uses AI systems to generate outputs and support user workflows. These systems assist decision-making but do not replace your independent judgment. You are responsible for reviewing outputs and actions before relying on them.

Children's Privacy

Agent Jam is not directed to children under 13 (or the minimum age required in your jurisdiction). If you believe a child provided personal data, contact us and we will take appropriate steps to delete it.

How to Exercise Privacy Rights

To submit a privacy request, contact us at hello@boilingkettle.co. We may need to verify your identity before fulfilling requests.

Authorized agents may submit requests where permitted by law, subject to identity and authorization verification.

Changes to This Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide notice through the service or by email. Continued use after the effective date means you accept the updated policy.

Contact Us

If you have questions about this Privacy Policy, please contact us at hello@boilingkettle.co