Privacy Policy

This Privacy Policy describes how MultiWorkAgent (the “Service”) handles information when you use our website and signed-in product. The Service is a multi-business workspace with an AI agent chat, integration and database connection management, usage metering, and optional paid subscriptions.

Who we are

MultiWorkAgent is operated as a hosted web application (for example at multiworkagent.vercel.app when deployed on Vercel). For privacy questions, use Contact support in Settings after you sign in, or the support path linked from the marketing site.

Information we collect

• Account data — email address, display name, password hash (if you sign up with email and password), and sign-in method (for example Google OAuth subject id when Google sign-in is enabled).
• Team data — team members you invite, their roles (owner, operator, viewer), and membership status.
• Workspace data — business names and settings, agent chat messages and thread metadata, agent execution run records (status, token counts, summaries), in-app notifications, and support conversation messages you send through Contact support.
• Files you upload — chat attachments and per-business knowledge files stored on the application server filesystem; binary metadata is stored in PostgreSQL.
• Integration and database configuration — which providers you connect per business, connection status, and encrypted OAuth tokens or API keys when encryption is configured on the server (INTEGRATION_SECRETS_KEY). We do not mix credentials across businesses or accounts.
• Billing data — subscription tier, usage counters, Square customer/subscription identifiers, and invoice metadata synced from Square. Card payments are handled by Square; we do not store full payment card numbers on our servers.
• Technical data — IP address, browser type, request logs, session cookies, and similar data needed to operate and secure the Service.

How we use information

• Provide the Service: authentication, business workspaces, agent chat, file uploads, integration OAuth flows, billing, and notifications.
• Send your chat content and eligible attachments to AI providers (Google Gemini and/or Anthropic, depending on server configuration) to generate agent replies.
• Enforce plan limits (free tier monthly runs, paid quotas, daily run caps, concurrency limits) and display usage in the header and Billing page.
• Process subscriptions and webhooks through Square.
• Maintain security, debug errors, and comply with applicable law.

Third parties

When you connect an integration, we exchange data with that provider only as needed to complete OAuth or store credentials you supply. Those providers have their own privacy policies. We also rely on hosting and database providers (for example Vercel and PostgreSQL), Google and/or Anthropic for AI inference, and Square for payments, each under their respective terms.

Where data is stored

• PostgreSQL — accounts, businesses, chats, runs, billing records, notifications, and most metadata.
• Application file storage — chat attachments and knowledge files on disk (storage/ locally; on Vercel, under /tmp/multiworkagent/storage). Files on ephemeral hosting may not survive redeploys or cold starts; do not rely on them as your only copy of important documents.
• Support chat — stored in a separate SQLite database file under the same storage root.

Retention and deletion

We keep data while your account is active. Account owners can delete all workspace data or delete the entire account from Settings (danger zone). Deletion removes associated businesses, chats, runs, connections, and related records subject to backup and legal retention limits. Support threads for the account are removed as part of account deletion flows implemented in the product.

Security

We use HTTPS in production, session-based authentication, role checks on API requests, and Fernet encryption for integration secrets when configured. No online service is perfectly secure; use strong passwords and limit team access appropriately.

Your choices

• Update profile and notification preferences in Settings.
• Disconnect integrations or database connections per business on Data & integrations.
• Delete workspace data or your account (owner only) in Settings.

Children

The Service is not intended for users under 16, and we do not knowingly collect their personal information.

International users

If you use the Service from outside the United States, your information may be processed in the United States or other countries where we or our subprocessors operate.

Changes

We may update this policy by posting a new version on this page and changing the “Last updated” date. Continued use after changes means you accept the updated policy.

Contact

Privacy questions: sign in and use Contact support, or the support channel described on the site.