Privacy

Privacy Policy

Agentwise Privacy Policy - How we handle your data and protect your privacy.

Overview

At Agentwise, we are committed to protecting your privacy and ensuring the security of your data. This Privacy Policy explains how we collect, use, and protect your information when you use Agentwise software.

Last Updated: January 15, 2025

Data Collection and Usage

What Data We Collect

Required Data

• API Keys: Your Claude API key and other service credentials (stored locally)
• Project Code: Code and files you ask Agentwise to generate or modify
• Configuration: Your Agentwise configuration and preferences
• Usage Metrics: Basic usage statistics for system optimization

Optional Data

• Error Reports: Crash reports and error logs (if enabled)
• Performance Metrics: System performance data (if enabled)
• Feature Usage: Which features you use most often (if enabled)

How We Use Your Data

Primary Uses

1. Code Generation: Process your requests to generate code and projects
2. System Operation: Maintain and improve Agentwise functionality
3. Optimization: Improve token efficiency and performance
4. Support: Provide technical assistance when requested

Secondary Uses

1. Product Improvement: Understand usage patterns to enhance features
2. Research: Anonymous analysis of development patterns (with consent)
3. Security: Detect and prevent misuse or security threats

Data Processing and Storage

Local-First Architecture

Agentwise follows a local-first approach:

Your Machine              Agentwise Servers         External APIs
┌─────────────────┐      ┌──────────────────┐      ┌─────────────────┐
│ • Project files │      │ • No code        │      │ • Claude API    │
│ • Configuration │◄────►│ • No projects    │◄────►│ • MCP servers   │
│ • Generated code│      │ • Usage metrics  │      │ • Optional APIs │
│ • API keys      │      │ • Error logs     │      └─────────────────┘
└─────────────────┘      └──────────────────┘      
     (Your data)           (Minimal data)           (API requests)

What Stays Local

• All project code and generated files
• API keys and credentials
• Project configurations and custom settings
• Personal data in your code or projects

What We Process

• Task requests (temporarily, for processing)
• System metrics (anonymous usage data)
• Error reports (if you opt-in)
• Support requests (when you contact us)

Data Transmission Security

Encryption in Transit

• All API communications use TLS 1.3 encryption
• Certificate pinning for critical connections
• Perfect Forward Secrecy (PFS) enabled
• No unencrypted data transmission

API Request Handling

// Example of secure API request processing
class SecureAPIHandler {
  async processRequest(request) {
    // Sanitize request data
    const sanitizedRequest = this.sanitizeData(request);
    
    // Encrypt sensitive parts
    const encryptedRequest = await this.encrypt(sensitiveRequest);
    
    // Process with external API
    const response = await this.callExternalAPI(encryptedRequest);
    
    // Clear sensitive data from memory
    this.clearSensitiveData(sanitizedRequest, encryptedRequest);
    
    return response;
  }
}

Third-Party Integrations

Claude API (Anthropic)

• Data Sent: Your prompts and context for code generation
• Purpose: AI-powered code generation and assistance
• Privacy: Subject to Anthropic's Privacy Policy
• Control: You control what data is sent through your requests

MCP Servers

• Data Access: Depends on specific MCP server configuration
• Examples: File system access, GitHub operations, database queries
• Control: You control which MCP servers to enable and their permissions
• Security: Each MCP server operates with limited, specific permissions

Optional Services

Services you may choose to integrate:

• GitHub: Repository operations (requires your GitHub token)
• Cloud Providers: AWS, GCP, Azure (requires your credentials)
• Databases: PostgreSQL, MongoDB (local or your database)
• Other APIs: Various development tools and services

Data Retention and Deletion

Automatic Deletion

• Temporary Data: Processing data deleted immediately after use
• Cache Data: Automatically expired based on TTL settings
• Session Data: Cleared when session ends
• Log Data: Rotated and deleted based on retention policy

Manual Deletion

# Delete all cached data
npm run data:clear-cache

# Delete configuration (reset to defaults)
npm run config:reset

# Delete all project data
npm run data:clear-projects

# Complete data wipe
npm run data:wipe-all

Data Portability

• Export Projects: Export all generated projects and code
• Export Configuration: Save your configuration for backup
• Export Metrics: Download your usage statistics
• Migration Tools: Tools to move between Agentwise installations

Privacy Controls

Opt-In/Opt-Out Controls

{
  "privacy": {
    "data_collection": {
      "usage_metrics": false,
      "error_reporting": false,
      "performance_data": false,
      "feature_analytics": false
    },
    "external_services": {
      "claude_api": true,
      "mcp_servers": true,
      "optional_apis": false
    },
    "logging": {
      "level": "error",
      "include_code": false,
      "include_personal_data": false
    }
  }
}

Granular Permissions

• File System Access: Control which directories Agentwise can access
• Network Access: Control which external services can be contacted
• API Usage: Control which APIs are enabled
• Data Sharing: Control what data (if any) is shared for analytics

Compliance and Standards

Data Protection Regulations

• GDPR Compliance: For European users
• CCPA Compliance: For California residents
• Privacy by Design: Built with privacy as a core principle
• Data Minimization: Collect only necessary data

Security Standards

• ISO 27001: Information security management
• SOC 2: Security, availability, and confidentiality
• OWASP: Web application security practices
• NIST: Cybersecurity framework compliance

Children's Privacy

Agentwise is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us so we can take appropriate action.

Enterprise Privacy

Additional Enterprise Protections

• Data Residency: Control where data is processed geographically
• Audit Logging: Comprehensive activity logging
• Access Controls: Role-based access to data and features
• Compliance Reporting: Regular compliance status reports
• Data Processing Agreements: Formal agreements for enterprise customers

On-Premises Deployment

For maximum privacy, enterprise customers can deploy Agentwise on-premises:

• Full Local Control: All processing happens on your infrastructure
• No External Data: Optional to disable all external API calls
• Air-Gapped Support: Operation in isolated environments
• Custom Compliance: Tailored to your regulatory requirements

Data Breach Response

Incident Response Plan

In the unlikely event of a data breach:

1. Immediate Response (Within 1 hour):

   • Identify and contain the breach
   • Assess the scope and impact
   • Begin forensic investigation

2. Short-term Response (Within 24 hours):

   • Notify affected users
   • Implement additional security measures
   • Coordinate with law enforcement if necessary

3. Long-term Response (Within 72 hours):

   • Submit required regulatory notifications
   • Provide detailed breach report
   • Implement preventive measures

User Notification

We will notify affected users via:

• Email: Direct notification to registered email
• System Alerts: In-application notifications
• Website Notice: Public disclosure on our website
• Status Page: Real-time status updates

International Data Transfers

Data Processing Locations

• Primary: Data processed locally on your machine
• API Calls: Processed in regions where API services operate
• Support: Support data may be processed in various jurisdictions

Transfer Safeguards

• Standard Contractual Clauses: For transfers outside your region
• Adequacy Decisions: Use of regions with adequate protection
• Privacy Shield: Where applicable
• Encryption: All transferred data is encrypted

Your Privacy Rights

Access Rights

• View Data: See what data we have about you
• Export Data: Download your data in portable format
• Usage Reports: Detailed reports of how your data is used

Control Rights

• Modify Settings: Change privacy preferences anytime
• Delete Data: Request deletion of specific data
• Restrict Processing: Limit how your data is used
• Object: Object to specific data processing activities

Exercise Your Rights

# Request data export
npm run privacy:export-data

# Delete specific data types
npm run privacy:delete --type=analytics

# Update privacy settings
npm run privacy:configure

Or contact us at: privacy@agentwise.ai

Cookies and Tracking

Local Storage Only

Agentwise uses local storage mechanisms:

• Configuration Storage: Local settings and preferences
• Cache Storage: Temporary performance optimization
• Session Storage: Current session information

No Web Cookies

The desktop application does not use web cookies or browser tracking.

Web Dashboard (Optional)

If you use the optional web dashboard:

• Essential Cookies: Required for functionality
• No Tracking: No advertising or analytics cookies
• Local Only: All data remains in your browser

Updates to This Policy

Notification of Changes

We will notify you of material changes to this Privacy Policy:

• Email Notification: If we have your email address
• In-App Notice: Prominent notice in the application
• Website Update: Updated policy posted on our website
• Version History: Track of policy changes

Your Options

When we update this policy:

• Continue Using: Acceptance of new terms
• Change Settings: Modify your privacy preferences
• Stop Using: Discontinue use if you disagree

Contact Us

Privacy Questions

For any questions about this Privacy Policy or our privacy practices:

Email: privacy@agentwise.ai
Subject Line: "Privacy Inquiry - [Your Topic]"

Data Protection Officer

Name: Philip Ritmeester
Email: dpo@agentwise.ai
Response Time: Within 30 days

Regulatory Complaints

If you're not satisfied with our response, you can contact:

• Your local data protection authority
• The Information Commissioner's Office (ICO) (UK residents)
• Your state attorney general (US residents)

---

This Privacy Policy is effective as of January 15, 2025. We encourage you to review this policy periodically for any updates.

Your privacy is important to us. We're committed to protecting your data and being transparent about our practices.