Privacy Policy

Privacy Policy

Last Updated: November 9, 2026

This Privacy Policy explains how AgencyOS (“AgencyOS,” “we,” “our,” or “us”) collects, uses, stores, protects, and shares information when you use the AgencyOS platform, website, and related services.

By using AgencyOS, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

Depending on how you use AgencyOS, we may collect:

  • Name and email address.
  • Account and login information.
  • Profile and company information.
  • Information provided when using AgencyOS.
  • Content, files, media, posts, campaigns, and other information uploaded or created through the platform.
  • Device and technical information, such as IP address, browser type, operating system, and usage information.
  • Information obtained from third-party services that you choose to connect to AgencyOS.

2. Google User Data

AgencyOS allows users to connect certain Google services to their AgencyOS account. Google user data is accessed only when the user chooses to connect and authorize the relevant Google service.

Google User Data We Access

Depending on the Google integration and features used, AgencyOS may access:

  • Your Google account name.
  • Your Google account email address.
  • Google account identifiers required for authentication.
  • YouTube channel details, playlists, video information, and the videos, thumbnails, and details you choose to publish through AgencyOS.
  • Google Ads accounts you link, together with campaign and performance data. AgencyOS only reads this data and does not create, edit, or delete campaigns, even though Google’s permission screen describes broader access.
  • Google Analytics reporting data for properties you link, such as users, new users, traffic channels, and conversion events.
  • Google Drive files and folders that you authorize AgencyOS to access.
  • Google Drive file names, metadata, thumbnails, and other information necessary to display and import authorized files.
  • Other Google data specifically required by a Google integration that you explicitly authorize.

AgencyOS requests only the permissions necessary to provide the relevant functionality.

How AgencyOS Uses Google User Data

AgencyOS uses Google user data only for user-requested and user-facing functionality, including:

  • Signing in and authenticating your AgencyOS account through Google.
  • Connecting your Google account to AgencyOS.
  • Allowing authorized users to browse and select files from Google Drive.
  • Importing selected Google Drive files into the AgencyOS media library or relevant AgencyOS features.
  • Providing Google-integrated functionality that the user has explicitly requested.
  • Maintaining, securing, and operating the Google integration.
  • Publishing and managing the YouTube content you request.
  • Showing Google Ads and Google Analytics performance reports to authorized members of your workspace.

AgencyOS does not use Google user data for advertising or targeted advertising.

AgencyOS does not sell Google user data.

AgencyOS does not use Google user data for purposes unrelated to the Google functionality that the user has authorized.

3. Sharing, Transfer, or Disclosure of Google User Data

AgencyOS does not sell, rent, or trade Google user data.

We do not share, transfer, or disclose Google user data to third parties except where necessary to:

  • Provide the Google-integrated functionality requested by the user.
  • Operate, maintain, and secure AgencyOS.
  • Use trusted service providers that process information on our behalf and are contractually required to protect the information.
  • Comply with applicable laws, regulations, legal processes, or valid governmental requests.
  • Protect the security, rights, and safety of AgencyOS, our users, or others.

Third-party service providers are only permitted to access information necessary to perform services for AgencyOS and are required to maintain appropriate confidentiality and security measures.

Google user data is not shared with third parties for advertising, targeted advertising, or unrelated purposes.

4. Google API Services Limited Use

AgencyOS’s use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements.

Google user data is used only to provide or improve user-facing features that are directly related to the functionality for which the user has granted permission.

AgencyOS does not sell Google user data or use Google user data for personalized advertising.

How We Protect Google User Data and Other Sensitive Data

Security procedures are in place to protect the confidentiality of your data:

  • Encryption in transit: Data moving between your browser, AgencyOS, and Google is sent over encrypted HTTPS/TLS connections.
  • Encryption at rest: Google OAuth access and refresh tokens and other connected-account credentials are encrypted before they are stored in our database.
  • Access controls: Role-based permissions and workspace separation limit data to authorized members of your organization.
  • Account security: Passwords are stored only as hashes, and two-factor authentication is available.
  • Logging and monitoring: We keep audit records of sensitive actions and work to keep message content and personal fields out of application logs.

No method of transmission or storage is completely secure, but we work to protect your data and to address security issues promptly.

AgencyOS does not use Google user data to develop, improve, or train generalized artificial intelligence or machine learning models.

Retention and Deletion of Google User Data

We keep Google user data only while it is needed to provide the features you use. You can disconnect a Google service in AgencyOS at any time or revoke access from your Google Account permissions at https://myaccount.google.com/permissions. After a service is disconnected, AgencyOS stops retrieving new data from it.

To request deletion of your Google user data, including stored tokens and synced reports, email [email protected]. We will complete the request within 30 days and confirm by email, unless the law requires us to keep certain records.

5. TikTok User Data

AgencyOS allows users to connect certain TikTok services to their AgencyOS account. TikTok user data is accessed only when the user chooses to connect and authorize the relevant TikTok service.

TikTok User Data We Access

Depending on the TikTok integration and features used, AgencyOS may access:

  • Your TikTok account name.
  • Your TikTok account email address, where available.
  • TikTok account identifiers required for authentication.
  • TikTok profile information.
  • TikTok videos, posts, media, and related information that you authorize AgencyOS to access.
  • Other TikTok data specifically required by a TikTok integration that you explicitly authorize.

AgencyOS requests only the permissions necessary to provide the relevant functionality.

How AgencyOS Uses TikTok User Data

AgencyOS uses TikTok user data only for user-requested and user-facing functionality, including:

  • Connecting and authenticating your TikTok account with AgencyOS.
  • Allowing authorized users to manage TikTok content through AgencyOS.
  • Allowing users to create, manage, schedule, or publish TikTok content where the relevant permissions have been authorized.
  • Displaying TikTok account and content information within AgencyOS.
  • Providing TikTok-integrated functionality that the user has explicitly requested.
  • Maintaining, securing, and operating the TikTok integration.

AgencyOS does not use TikTok user data for advertising or targeted advertising.

AgencyOS does not sell TikTok user data.

AgencyOS does not use TikTok user data for purposes unrelated to the TikTok functionality that the user has authorized.

6. Sharing, Transfer, or Disclosure of TikTok User Data

AgencyOS does not sell, rent, or trade TikTok user data.

We do not share, transfer, or disclose TikTok user data to third parties except where necessary to:

  • Provide the TikTok-integrated functionality requested by the user.
  • Operate, maintain, and secure AgencyOS.
  • Use trusted service providers that process information on our behalf and are contractually required to protect the information.
  • Comply with applicable laws, regulations, legal processes, or valid governmental requests.
  • Protect the security, rights, and safety of AgencyOS, our users, or others.

Third-party service providers are only permitted to access information necessary to perform services for AgencyOS and are required to maintain appropriate confidentiality and security measures.

TikTok user data is not shared with third parties for advertising, targeted advertising, or unrelated purposes.

7. TikTok API Services

AgencyOS’s use and transfer of information received from TikTok APIs will comply with applicable TikTok developer and API policies.

TikTok user data is used only to provide user-facing features directly related to the functionality for which the user has granted permission.

AgencyOS does not sell TikTok user data or use TikTok user data for personalized advertising.

8. Retention of TikTok User Data

AgencyOS retains TikTok user data only for as long as reasonably necessary to provide the functionality requested by the user, operate AgencyOS, maintain the user’s account, comply with legal obligations, resolve disputes, and enforce our agreements.

When a user disconnects their TikTok account or revokes the permissions granted to AgencyOS, AgencyOS will no longer request or access new TikTok data through the revoked authorization.

Previously obtained TikTok data associated with the disconnected integration will be deleted within a reasonable period unless retention is required or permitted by applicable law or is necessary for legitimate security or operational purposes.

9. Meta User Data (Facebook and Instagram)

AgencyOS allows users to connect a Facebook Page or an Instagram professional account to their AgencyOS workspace.

AgencyOS accesses Meta user data only when a user connects an account and authorizes the requested permissions. The information accessed depends on the permissions granted and the features the user chooses to use.

Meta User Data We Access

Depending on the connected account, authorized permissions, and features used, AgencyOS may access:

  • Facebook or Instagram account and Page identifiers, names, usernames, and profile pictures.
  • Content that the user publishes or schedules through AgencyOS, together with related post information and performance metrics.
  • Direct messages, reactions, and read receipts sent to or from the connected Instagram account, where authorized.
  • Comments and replies on posts published through the connected account.
  • The name, username, profile picture, and Instagram-scoped ID of people who comment on or reply to content associated with the connected Instagram account, where available and authorized.
  • Access tokens required to maintain the authorized connection between AgencyOS and the connected Meta account.

AgencyOS requests and accesses only the permissions necessary to provide the features the user has authorized.

How AgencyOS Uses Meta User Data

AgencyOS uses Meta user data only to provide the features requested by the user, including:

  • Connecting and maintaining authorized Facebook Page and Instagram professional account integrations.
  • Publishing and scheduling social media content.
  • Displaying connected account information, posts, and account performance metrics.
  • Displaying conversations and comments in the AgencyOS Inbox.
  • Allowing authorized workspace members to read and manage conversations and comments.
  • Allowing authorized team members to reply to messages and comments, hide comments, or delete comments through the AgencyOS Inbox, where supported by the relevant permissions.
  • Maintaining, securing, and operating the Meta integration.

All replies sent through the AgencyOS Inbox are written and sent by a team member. AgencyOS does not send automated or promotional messages.

AgencyOS does not use Meta user data for advertising or to build profiles of people who message or comment on connected accounts.

AgencyOS does not sell Meta user data.

AgencyOS does not use Meta user data for purposes unrelated to the functionality authorized by the user.

10. Sharing, Transfer, or Disclosure of Meta User Data

AgencyOS does not sell, rent, or trade Meta user data.

Meta user data is accessible only to authorized members of the agency workspace that connected the relevant Facebook Page or Instagram professional account, subject to their workspace permissions and access rights.

We share Meta user data only when necessary to:

  • Provide the Meta-integrated functionality requested by the user.
  • Host, operate, maintain, and secure AgencyOS through our service providers, including Contabo and Cloudflare, Inc.
  • Comply with applicable laws, regulations, legal processes, or valid governmental requests.
  • Protect the rights, security, and safety of AgencyOS, our users, or others.

Service providers are permitted to process information only as necessary to provide their services on our behalf and are expected to maintain appropriate confidentiality and security measures.

Meta user data is not shared with third parties for advertising, targeted advertising, or building profiles of people who message or comment on connected accounts.

11. Retention and Deletion of Meta User Data

AgencyOS retains Meta user data only while the relevant account remains connected and the data is needed to provide the requested features, subject to applicable legal, security, and operational requirements.

Disconnection of a Facebook Page or Instagram Account

If a user disconnects a Facebook Page or Instagram account from AgencyOS, the account’s inbox data, including conversations, messages, comments, and associated contact details, will be deleted automatically if the account is not reconnected within 30 days.

If the AgencyOS workspace is deleted, its associated inbox data will be deleted immediately.

Access tokens are removed when an account is disconnected or when Meta notifies AgencyOS that access has been revoked.

AgencyOS will no longer access new Meta user data through a disconnected or revoked authorization.

12. How to Request Deletion of Meta User Data

Users and individuals whose data is processed through a connected Facebook Page or Instagram account can request deletion using the following methods.

Option 1: Disconnect Your Account

You can disconnect your Facebook Page or Instagram account directly from AgencyOS.

You can also remove AgencyOS from your connected applications in your Facebook or Instagram settings:

  • Facebook: Settings & Privacy → Settings → Apps and Websites.
  • Instagram: Settings → Apps and Websites.

When Meta notifies AgencyOS that access has been removed, we will delete the related data in accordance with our deletion procedures and applicable requirements. Where applicable, we will provide a confirmation code that you can use to check the status of the deletion request.

Option 2: Request Deletion by Email

If you have sent a message or posted a comment on a business account that uses AgencyOS and would like your data deleted, email:

[email protected]

Please include your Instagram username or Facebook name and enough information to identify the relevant messages, comments, or account data.

AgencyOS will delete the relevant messages, comments, and profile data within 30 days and confirm the deletion by email, subject to applicable legal requirements and any necessary verification of the request.

13. Third-Party Services

AgencyOS may integrate with third-party services, including Google, TikTok, Meta (Facebook and Instagram), and other services selected by the user.

When a user connects a third-party service, the relevant information may be processed according to the functionality authorized by the user, the permissions granted, and the applicable third party’s privacy policy and platform requirements.

Users are encouraged to review the privacy policies and terms of service of third-party services they choose to connect to AgencyOS.

14. User Rights and Choices

Depending on applicable laws, users may have rights regarding their personal information, including the right to:

  • Request access to their personal information.
  • Request correction of inaccurate information.
  • Request deletion of their information.
  • Withdraw certain permissions.
  • Disconnect third-party integrations.
  • Request information about how their information is processed.

Users can disconnect supported third-party integrations through AgencyOS or revoke access through the relevant third-party platform.

Privacy requests can also be submitted using the contact information provided below.

15. Children’s Privacy

AgencyOS is not intended for children under the applicable minimum age required by law. We do not knowingly collect personal information from children without appropriate authorization.

16. Changes to This Privacy Policy

AgencyOS may update this Privacy Policy from time to time to reflect changes to our services, data practices, integrations, or applicable legal requirements.

When changes are made, the “Last Updated” date will be updated accordingly.

17. Contact Us

If you have questions about this Privacy Policy, AgencyOS’s data practices, or the use of Google, TikTok, Facebook, or Instagram user data, please contact us:

AgencyOS

Email: [email protected]

Website: https://omniohub.ai