Privacy Policy

Last updated: October 30, 2026

This policy explains what MrAgentˣ ("we", "us"; operated from New Jersey, USA) collects, why, and what control you have. The short version: your content is yours, it is encrypted, we don't sell it, and we never use it to train AI. Using the service means accepting this policy.

1. What We Collect

Account information. Name and email address from your sign-in provider (Google OAuth). We never see your Google password.

Content you provide. Email you clip, or forward to your MrAgentˣ address (during the beta, a trial address granted on request, active for 3 to 7 days; what arrived stays in your workspace after the address ends), documents you upload, items you clip with the Mac app, and conversation content you explicitly capture from AI sessions. This includes the structured knowledge we derive from it (topics, atoms, summaries).

Usage telemetry. To improve the product we log how the service is used: which features and tools are called, search query text your AI sends to the service, result counts, timing, and which pages of the dashboard are visited. Telemetry, including search query text, is deleted after 90 days. It is internal analytics only — it is never sold, shared, or used for advertising.

Feedback and support tickets. When you submit a feedback or support request, we collect your name, email address, and the content of your submission. Feedback is displayed publicly with your name and title only if you tick the consent box on the form; you can withdraw that consent at any time by emailing cco@mragentx.com and we remove it. Support ticket content is used only for responding to your request and is never displayed publicly.

Help questions. When you ask MrAgentˣ for help with the product, we may log the text of your question, with email addresses, links and long numbers masked, and a note when our documentation had no answer. A logged question can still contain what you typed, so please do not include personal details in help questions. We use these logs only to improve our documentation. They are deleted after 90 days and are not part of your workspace export.

Technical data. Standard server logs, authentication records, and error reports.

What we do NOT collect: payment card details (Stripe processes payments), your Google password, your AI assistant conversations (only what you explicitly capture), or advertising identifiers. We set no advertising or cross-site tracking cookies (see Cookies).

2. Content About Other People

Email you forward, posts and comments you clip, and documents you upload may contain content written by or about people other than you, including authors' public names, handles and profile links. We process that content solely to build your private context map, at your direction; for it, you are the controller and we act as your processor. It is never shared with other users, published, or used for any purpose beyond providing the service to you. You are responsible for submitting only content you may lawfully process (see Terms, Section 4).

Linking an author to a person. If a social handle appears in an email signature already in your workspace, the service links that author to that person in your workspace. Where the match is only likely, it asks you first, and you can unlink at any time. This link exists only inside your workspace.

We do not notify the people whose content you submit, because doing so would require contacting them individually about data we hold only on your behalf. If you are not a user and believe your personal data is held in a workspace, write to cco@mragentx.com and we will act within 30 days.

3. The Mac App and Clipping

• What it reads. The Mac app reads text through macOS Accessibility, only the one item under your pointer, only at the moment you press a clip shortcut. It does not read anything before you press the shortcut or in the background.
• Double-tap shortcut. The default shortcuts are key combinations, which need no extra permission. You can switch any of them to a double-tap of Command or Option in Settings. For a double-tap, the app watches only whether that one modifier key is pressed or released, and when. This needs the macOS Input Monitoring permission, which is wider than what the app uses. It does not see the letters or numbers you type, and it stores and sends nothing from it.
• What it saves and sends. The clipped item goes to your private workspace over an encrypted connection, with its author's public name, handle and profile link, the platform, and a link back to the original so it can credit the source. For a comment, the post it belongs to is saved for context. The app never posts, likes, follows or messages.
• Where your content goes. What you clip, forward or save goes to your private workspace and, when reasoning or a reply is drafted, to your own Claude plan or API key. Nowhere else.
• What the clip sends to the site. On the Mac, nothing: the clip reads the item on your screen and sends no request to the platform. From the phone, you save a link to Reading List or a bookmark, and the Mac app later fetches that public post the way a browser would, from the platform or, for X, from a public mirror service (FxTwitter), which receives the post link and nothing else. The platform sees a request for that one post from your Mac. Only public posts can be fetched this way; nothing behind your login.
• Where it stays. Clipped posts and comments are kept in your private workspace only. They are never shared, sold, used to train any model, or included in exports, and deleting one erases it permanently. Their text is sent to a language model only to draft a reply, on your own API key or Claude plan: when you ask for one, or, if you switch on Auto mode, for posts you have added, until you switch it off.
• Your controls. You can pause clipping from the menu bar, block sites in Settings, switch off what can be clipped, revoke a paired Mac, or revoke Accessibility in System Settings. Each stops the app.
• Limits. Clips can include private text from emails or AI chats, and we do not remove personal data from what you choose to clip.

4. How We Use Information

• Operate the service: ingest, extract, organize, search, and display your content to you and to AI tools you connect.
• Send service notifications (delivered inside the product and/or by email): trial and quota notices, security notices, material changes.
• Improve the product using aggregated telemetry (e.g. "which searches return no results").
• Keep the service reliable and secure, and handle billing and support.
• Comply with legal obligations. Where the law requires us to disclose your data, we tell you first where we are legally permitted to.

We do not: sell personal data, run advertising, build behavioral profiles, or use your content to train AI models — ours or any third party's.

5. Legal Bases (EEA and UK)

During the private beta the service is offered to users in the United States. If GDPR or UK GDPR nevertheless applies to you: we process data to perform our contract with you (providing the service and billing), to meet legal obligations (such as tax records), and for our legitimate interests (security, reliability, analytics, error reports, support). We do not rely on consent for core processing, and you can object to legitimate-interest processing (Section 10). You can opt out of analytics by emailing cco@mragentx.com. Where an organization provides the service to you, it may be the controller of your data and a data processing agreement can apply.

6. AI Processing

AI features run under your AI accounts, in one of two modes you choose:

• Plan mode: processing happens inside your own AI assistant subscription (e.g. Claude) when you run MrAgentˣ commands there. Content flows between the service and your assistant session at your direction.
• API-key mode: processing uses an API key you supply (e.g. an Anthropic key). Requests go to that provider under your agreement with them, billed to you.

MrAgentˣ holds no AI-provider account that processes your content. Your relationship with Anthropic (or any provider) is governed by their privacy policy.

7. Security

• Your content is encrypted at rest with AES-256-GCM using a per-workspace key held in a managed secrets vault. Content is decrypted only to serve you — search runs against encrypted-at-rest data using a plaintext index of limited excerpts, and full content is decrypted only when you open it.
• All traffic is encrypted in transit (TLS).
• Inbound email is verified (signature and sender authentication checks) before ingestion; unrecognized senders can be blocked by your allowed-senders setting.
• More on how this is built: Security is shipped, not promised.

No system is perfectly secure; we cannot guarantee absolute security, but security failures are treated as our highest-severity issues. If a breach affects your data, we notify you without undue delay and notify authorities where the law requires.

8. Service Providers (Subprocessors)

We share data with these providers only as needed to run the service, under terms limited to providing that service. We may disclose information if required by law, or to protect the rights and safety of users or the public. If MrAgentˣ is involved in a merger, acquisition, or sale of assets, your data may transfer to the successor, which remains bound by this policy until you are told of any change.

9. Retention and Deletion

• Your content is retained while your account is active.
• Deactivating your email address (quota, trial end, cancellation) stops inbound mail but does not delete your context map — your knowledge remains intact and exportable.
• Deleting a source removes it together with everything derived from it. Deleting a file hides its contents from all views.
• Deleting your workspace is the full-deletion path: content, derived knowledge, and encryption keys are deleted within 30 days, except minimal records we must keep for legal/billing compliance. During the beta, request workspace deletion at cco@mragentx.com and we will complete it within 30 days; an in-product delete control is planned.
• After subscription termination you have a 30-day export window (Terms, Section 17).
• Telemetry, including search query text, is deleted after 90 days; aggregate figures with no personal data may be kept longer.
• Account, billing, and support records are kept as long as needed for the service, legal, and dispute purposes.

10. Your Rights

Wherever you live, we honor these requests; if you are in a jurisdiction with specific privacy laws (GDPR, UK GDPR, CCPA/CPRA), these map to your statutory rights:

• Access / portability: export your content via built-in export tools, or request a copy.
• Correction: correct account data; edit or supersede derived knowledge in-product.
• Deletion: delete sources, files, or your entire workspace (above).
• Objection / restriction: contact us to object to or restrict specific processing, including analytics.
• Complaint: if you are in the EEA or UK, you may complain to your local data protection authority.
• We do not sell or share personal information as defined by the CCPA/CPRA, so there is nothing to opt out of; California residents keep their rights to know and delete.

To exercise any right: cco@mragentx.com. We respond within 30 days.

11. International Transfers

The service is hosted in the United States. Our database runs on Supabase in the AWS US West (Oregon) region, and our web application runs on Vercel in the US East (Washington, D.C.) region. If you use it from elsewhere, your data is processed in the US, and our providers may operate in other countries.

12. Children

The service is not directed to anyone under 18, and we do not knowingly collect their data. If we learn we have, we will delete it on notice.

13. Cookies

We use essential session cookies for sign-in, and nothing else. Our public pages set no tracking cookie. To understand which pages are visited and where traffic comes from, we count page views with the page path and referrer, with no visitor identifier, and we use Vercel Web Analytics, which is cookieless and stores no identifier. Figures are aggregated and are never sold or shared with third parties. No advertising or cross-site tracking cookies.

14. Changes

Material changes will be announced with at least 30 days' notice in-product or by email. The "last updated" date always reflects the current version.

15. Contact

Privacy questions and rights requests: cco@mragentx.com