Privacy Policy
What we process, who we share it with, and the rights you have over it.
Last updated: August 1, 2026
Controller
Uli Prantz
Bela-Bartok-Weg 9A
06862 Dessau-Roßlau
Germany
Contact: hello@all-agents.io, or the contact page. Full provider details are on the imprint.
Data protection officer
We have not appointed a data protection officer. Under Art. 37 GDPR, that is only mandatory for public authorities, or for organizations whose core activities involve large-scale, regular and systematic monitoring of individuals, or large-scale processing of special-category data. all-agents is an early-access product run by a sole trader and does not meet any of those thresholds.
What we process, and why
- Visiting this site. Serving these pages to you requires our host, Vercel, to handle standard web request data (such as your IP address and browser type). Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in operating the site.
- Analytics. We use PostHog to understand how the site is used. This sets a cookie and a local-storage entry on your device when a page loads — see “Cookies and local storage” below for exactly what that means and how to opt out. Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in understanding site usage.
- Contacting us. If you email hello@all-agents.io or use the contact page, we process your address and message to reply. Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in responding to messages sent to us.
- Using the early-access product. If you create an account and configure a workflow, we process account data and the content of that workflow to run it — including sending it to the processors listed below (OpenAI, Kernel, Resend, Railway). Legal basis: Art. 6(1)(b) GDPR — necessary to provide the service you signed up for.
Who we share data with
We use the following processors. Each is described above with what it processes and why; this lists where each one is located.
| Processor | What it processes | Location |
|---|---|---|
| Vercel | Hosts this website — every request to all-agents.io passes through its infrastructure. In production, it also runs the sandboxed code execution the product uses for a Stage-1 agent run. | United States — third-country transfer |
| Railway | Hosts the backend application the product runs on, in production. | United States — third-country transfer |
| PostHog (EU Cloud) | Product analytics for this site: page views, session recordings (all typed input masked), and campaign attribution (UTM parameters). See “Cookies and local storage” below. | European Union |
| Resend | Sends transactional email on our behalf: account verification, password reset, and owner notifications about product activity. Processes the recipient address, subject and body text of those emails. | United States — third-country transfer |
| OpenAI | The language model behind the product's agent runtime. Processes the workflow instructions and other content a run needs, for customers using the early-access product. | United States — third-country transfer |
| Kernel | Provides the cloud browser (computer-use automation and in-VM Playwright) the product uses to operate a customer's tools during a run, and to provision credentials via Managed Auth. Processes what is on screen during that automation, including third-party account data a customer's own tools display. | United States — third-country transfer |
Transfers outside the EU
Vercel, Railway, Resend, OpenAI and Kernel are US companies and process data outside the European Economic Area; using them involves a third-country transfer. Where that happens, the transfer relies on the safeguards in that processor's own data processing agreement. This policy does not claim participation in a specific transfer mechanism (such as the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework) for any processor unless we have verified it directly — we have not done so for these six. PostHog's analytics processing for this site stays within the EU.
How long we keep data
We do not run an automated data-deletion job. Account and workflow data is kept for as long as the account exists. If you want your data deleted, contact us at hello@all-agents.io and we will delete it. Messages you send us are kept as long as we need them to answer you, then deleted by hand — there is no fixed schedule for that either.
Your rights
Under the GDPR, you have the right to:
- Access the data we hold about you (Art. 15).
- Have inaccurate data corrected (Art. 16).
- Have your data deleted (Art. 17).
- Restrict how we process it (Art. 18).
- Receive it in a portable format (Art. 20).
- Object to processing based on legitimate interest (Art. 21).
To exercise any of these, email hello@all-agents.io.