Augmenter

Privacy Policy

Last updated: July 15, 2026

This Privacy Policy explains how Northbrook PBC, a Delaware public benefit corporation (“Northbrook,” “we,” “us,” or “our”), handles information when you use Augmenter — the website at augmenter.com, the agent marketplace, and the infrastructure that runs agents on your behalf (together, the “Service”). We keep the data we hold to what the Service actually needs, and we explain it plainly here.

1. Information we collect

We collect only what we need to operate the Service:

  • Account email. Your email address, used to sign you in with a one-time code and to reach you about your account.
  • Workspace and connection metadata. When you install an agent, we store metadata about the connected workspace and bot — for example, your Slack workspace and bot identifiers — so an installed agent can operate.
  • Connection credentials. The tokens needed to talk to services you connect are stored encrypted in a secrets vault. They are used only to run your installs and are never shown back to you in plaintext.
  • Agent configuration and memories. The instructions, configuration, and memories your agents build up as they work. You can view these — and delete an agent’s memories — from your dashboard.
  • Usage telemetry and run traces. Records of agent runs — timing, token counts, status, and traces — used to meter usage, bill accurately, debug, and keep the platform reliable.
  • Cookies. A small number of cookies, limited to keeping you signed in and remembering your light/dark theme preference. We do not use advertising cookies.

2. How we use information

We use the information above to:

  • operate your installs and run your agents on our infrastructure;
  • meter usage and bill you for what you use;
  • provide support, debug problems, and keep the Service secure and reliable; and
  • communicate with you about your account and the Service.

We do not sell your personal information, and we do not use your agent memories or run data to train models for anyone else.

3. How we share information

We share information with a small set of service providers (subprocessors) that help us run the Service, each under obligations to protect it:

  • Vercel — hosting and the infrastructure that runs the Service and your agents;
  • Supabase — authentication and our primary data store;
  • Slack — where installed agents operate, when you connect a workspace;
  • Stripe — payment processing for paid plans and metered usage; and
  • model providers — reached through a model gateway to run the AI calls your agents make.

We may also share information when the law requires it, to protect the Service and its users, or as part of a business transfer — in which case this Policy continues to govern the information.

4. Where information is processed

The Service and our subprocessors may process information in the United States and other countries where they operate. When we transfer information across borders, we rely on appropriate safeguards to protect it.

5. Retention

We keep account information for as long as your account is active. Agent memories persist until you delete them or the install is removed. Run traces and usage telemetry are retained on a schedule that depends on your plan — longer history on paid plans, shorter on free — and then aged out. When you close your account, we delete or de-identify the information we no longer need to keep, except where we must retain it to meet a legal or billing obligation.

6. Your rights and choices

You can view and manage much of your data directly: your dashboard lets you inspect an agent’s configuration and delete its memories, and removing an install takes down the connection it used. You can also ask us to access, correct, or delete your personal information by writing to the address below, and we will honor the rights that apply to you under applicable law. Because agents run on the data you connect, deleting an install or its memories is often the fastest way to remove data from the Service.

7. Security

We hold connection credentials encrypted in a vault, isolate each install so one team’s agents cannot reach another’s, and limit access to production data to what operating the Service requires. No system is perfectly secure, but we design the Service to keep the data we hold — emails, workspace metadata, credentials, agent configuration and memories, and usage telemetry — protected and scoped to its purpose.

8. Children

The Service is built for organizations and is not directed to children. We do not knowingly collect personal information from anyone under 13 (or the minimum age in your jurisdiction).

9. Changes to this Policy

We may update this Policy as the Service evolves. When we make a material change, we will update the date above and, where appropriate, let you know. Continuing to use the Service after a change takes effect means you accept the updated Policy.

10. Contact

Questions about this Policy or your data? Write to us at team@augmenter.com.