Effective date: July 5, 2026 · Last updated: July 8, 2026
This Privacy Policy explains how AgentUp ("AgentUp", "we", "us", or "our") collects, uses, discloses and protects information when you (i) message an Instagram, Telegram, WhatsApp, or website channel connected to our AI agents, (ii) visit agentup.agency, (iii) create and use an account in the AgentUp client cabinet at agentup.agency/app/, or (iv) engage us as a client to design and operate an AI agent for your own business or personal use (together, the "Service"). By using the Service, you agree to the practices described here.
AgentUp is an AI automation studio operated by Andrii Sokolov, providing custom AI agents to businesses of any size and to private individuals, worldwide. For the purposes of data protection law, AgentUp acts as the data controller for information collected through this website, the client cabinet, and our own demo channels, and as a data processor for conversation data handled on behalf of our clients' own AI agents (in which case the client is the controller and this Policy supplements, but does not replace, their own privacy notice).
Depending on how you interact with us, we may collect:
The client cabinet at agentup.agency/app/ is a personal dashboard for AgentUp clients. Signing in uses Supabase Auth with either an email/password combination or Google Sign-In (in which case Google shares your name, email address, and profile picture with us, as shown on the consent screen). Inside the cabinet you can see your agent's activity, manage your subscription, exchange messages and files with the AgentUp team, and adjust your agent's settings. Access is protected by row-level security: each client account can only ever read and write its own records.
Where the GDPR or an equivalent regime applies, we rely on: your consent (e.g., messaging us, accepting cookies, linking a channel to your profile); the performance of a contract (fulfilling an inquiry, operating your cabinet account, or a client engagement); our legitimate interests (operating and improving the Service, preventing abuse, direct communication with prospective clients); and, occasionally, a legal obligation (accounting, tax, or law-enforcement requests).
Our agents use AI language models to draft or send replies and to qualify and prioritise incoming inquiries. These are operational, business-facing decisions; they do not produce legal effects or similarly significant decisions about individuals (such as credit, employment, or access to essential services), and a human reviews any outcome that materially affects a specific person on request. You may always ask to speak with a human, and can request that a decision or reply be reviewed. In the cabinet, our support chat is answered by AI first; it hands the conversation over to a human automatically when it cannot help or when you ask for a person.
To generate replies we send the relevant conversation context to large-language-model providers through OpenRouter (which routes requests to model vendors such as OpenAI, Google, and Anthropic). Content is transmitted for the duration of the request only, under API terms that do not permit the provider to use it to train their models. We do not use your conversations, files, or business data to train any model of our own, and we never share them with third parties for advertising.
If you talked to an AgentUp agent on WhatsApp, Telegram, or Instagram before creating a cabinet account, you can link that history to your profile so your agent knows the full context. Linking only ever happens with proof that the channel is yours:
Once linked, the conversation history from that channel becomes visible to your agent and to the AgentUp team member supporting you — the same people who could already see it inside that channel. You can ask us to unlink a channel at any time.
Files uploaded in the cabinet are stored in a private storage bucket hosted in the European Union, encrypted in transit (TLS) and at rest, with row-level security so that only your account and the AgentUp team can access them. Our systems may automatically read the contents of uploaded documents (PDF, Word, Excel, and similar) to add the relevant facts to your agent's knowledge base. Files are never shared with third parties, and you can request deletion of any file at any time.
Subscription and one-time payments are processed by Paddle, acting as merchant of record. Paddle collects your payment-method details directly under its own privacy policy; we receive only confirmation of the transaction (amount, status, invoice identifiers) and never see or store card numbers. For clients in Ukraine we may additionally offer a local UAH payment provider, which will be named here before it goes live.
This website uses Google Analytics (via gtag.js) to understand how visitors use the site, using cookies and similar identifiers. You can prevent this by using your browser's cookie controls, browser extensions that block analytics scripts, or Google's own Analytics opt-out browser add-on. The site and cabinet also use your browser's local storage for functional preferences only (theme, language, session tokens) — these are not used for tracking. We do not use cookies for third-party advertising.
We do not sell or rent your personal data. We share information only with service providers who process it on our behalf, under contract, and only to the extent needed to run the Service:
Our primary database, file storage, and servers are hosted in the European Union. Some of our sub-processors (for example, certain AI inference, payment, or platform providers) may process data outside the EU/EEA, including in the United States. Where that happens, we rely on the safeguards those providers make available (such as standard contractual clauses or equivalent mechanisms) to protect your information.
Conversation data is retained for up to 12 months from the last interaction, after which it is automatically deleted, unless a longer period is required by law or by a specific client agreement. Cabinet account data, uploaded files, and agent knowledge are retained for as long as your account exists. Payment and invoice records are kept as long as accounting and tax law requires. When you delete your account (Section 15), your profile, conversations, files, and settings are permanently removed, except for the minimal records we are legally required to keep.
Subject to applicable law, you have the right to: request access to the personal data we hold about you; request correction of inaccurate data; request deletion of your data; request restriction of processing; receive a copy of your data in a portable format; object to processing based on legitimate interests; and withdraw consent at any time (e.g., by replying "STOP" to opt out of automated messaging). Cabinet users can exercise the two most important rights directly in Settings: "Export my data" downloads a machine-readable copy of your profile, conversations, and records, and "Delete account" permanently erases your account and associated data. If you are in the EU/EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority. To exercise any other right, contact us using the details in Section 21.
The Service is intended for business owners, private adult users, and their customers, and is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
We use industry-standard safeguards to protect data from unauthorized access, alteration, or disclosure: encrypted connections (HTTPS/TLS 1.3), encryption at rest for stored files, database row-level security isolating each client's records, least-privilege credentials for our automation systems, and an internal audit log of every automated action our AI systems perform on client data. No system is completely secure, and we cannot guarantee absolute security.
Our application accesses Instagram and WhatsApp messaging data through the Meta Platform API solely to respond to your messages. We comply with Meta's Platform Terms and Meta's Messaging Policy. We do not use this data for advertising or sell it to any third party.
Our channels and site may link to third-party platforms (e.g., Instagram, Telegram, Google Maps, Paddle's checkout and billing portal). We are not responsible for the privacy practices of those platforms — please review their own policies.
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. Material changes will be reflected by an updated "Last updated" date, and where appropriate, we will notify active clients directly.
For any question about this Policy or to exercise your rights, contact us at:
Email: anri.sokol.work@gmail.com
WhatsApp: +380 96 511 4098