Effective date: November 3, 2026
CodeWorks Labs LLC d/b/a AgentOne ("we," "us," or "our") operates the AgentOne desktop application and the website located at www.agent-one.dev (collectively, the "Service"). CodeWorks Labs LLC is a limited liability company organized under the laws of the State of Oklahoma. This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data.
The AgentOne desktop application is open source, so you can review exactly what data it handles in its public source code.
When you create an account, we collect the following:
When you sign in, we collect and store session data including:
Your chat history and messages are synced to our servers and stored so they can be accessed across your devices. This sync is a core feature of the Service and occurs automatically when you are signed in. Chat data is associated with your account and stored on our servers.
If you enable settings sync in the desktop application, your application preferences (such as theme, text scale, tool configurations, and other non-sensitive settings) are transmitted to and stored on our servers so they can be synchronized across your devices. Settings sync is optional and can be disabled at any time. Installed extensions and their configurations, and scheduled agents, are not included in settings sync and remain on your device.
You may separately opt in to API key sync, which allows your third-party API keys to be synced across your devices. If you enable this feature, your API keys are encrypted before transmission and stored on our servers in encrypted form. API key sync is entirely optional, requires separate opt-in from settings sync, and can be disabled at any time. When disabled, synced API keys are deleted from our servers.
You may upload a profile image directly, in addition to receiving one from an OAuth provider. Uploaded profile images are stored on our servers and associated with your account.
We use Google Analytics on www.agent-one.dev to collect usage data such as page views, button clicks, browser or device context, and general geographic region. This data helps us understand how the website is used and improve it.
The AgentOne desktop application does not collect usage analytics. Desktop usage analytics were removed in AgentOne 1.1, and the application no longer sends usage data to Google Analytics or any other analytics service.
If you purchase a paid plan or credits, payments and subscriptions are processed by our payment provider, Polar. Polar collects your payment details directly; we do not receive or store your full payment card number. We receive information about your subscription, plan, and credit balance so we can provide the features you paid for.
When you use AgentOne-provided models, we record usage information for each request, such as the model used and the number of input, output, and cached tokens, and share it with Polar to meter your credit usage. This usage information is also used to show your credit balance and per-chat usage in the application. The usage information shared with Polar does not include the content of your prompts or responses.
When you use AgentOne-provided models, we retain a record of each request processed through our infrastructure. A record includes the messages, attachments, and tool information contained in the request, the response returned, and related metadata such as the time of the request, the model used, and the account that made it. Requests you make with your own API keys or to local models do not pass through our servers and are not included in these records.
These records are associated with your account and are kept separately from your synced chat history. Access to them is restricted to authorized personnel and is limited to the purposes described in section 3, such as investigating suspected violations of our Terms of Service, responding to reports of abuse or security incidents, and complying with our legal obligations. We do not use these records to train AI models, and we do not sell them or use them for advertising.
The following data is stored on your device and is not transmitted to our servers unless you opt in to the corresponding sync feature:
Notifications from the desktop application, which may include a preview of an AI response, are displayed through your operating system's notification system.
Chat history and messages are synced to our servers when you are signed in (see section 1.3). A local copy is also maintained on your device.
AgentOne provides its own hosted AI models as the default experience. When you use AgentOne-provided models, your prompts and conversations are processed through our infrastructure, routed to the underlying AI providers, and retained as described in section 1.9. You may also connect to third-party AI providers directly using your own API keys, in which case those interactions are between you and those providers. We do not monitor the content of conversations processed by third-party providers using your own keys.
We use the following third-party services:
AgentOne provides its own hosted AI models by default, which route your requests through our infrastructure to underlying AI providers. The desktop application may also connect to third-party AI providers (such as OpenRouter, Groq, Google Generative AI, and Cerebras), local models (such as through Ollama or LM Studio), and extensions (MCP servers) using API keys and configurations you provide. When using your own API keys or extensions, these connections are made directly from your device; we do not proxy, intercept, or log these requests. Your use of third-party AI providers and extensions is governed by their respective terms and privacy policies.
We retain your account information, synced chat history, synced settings, and synced API keys (if opted in) for as long as your account is active. Session data is retained until the session expires or you sign out. If you delete your account, all associated data on our servers (account information, sessions, chat history, synced settings, synced API keys, uploaded profile images, and records of requests to AgentOne-provided models) will be permanently deleted, except as described below. Locally stored data on your device (API keys, settings) is under your control and is not affected by account deletion on our servers.
Records of requests to AgentOne-provided models (section 1.9) are retained for a limited period and are deleted on a rolling basis as newer records are added. Deleting a chat from your chat history does not immediately delete the corresponding request records. We may retain specific records for longer where required by law, or where reasonably necessary to investigate or resolve a suspected violation of our Terms of Service, a security incident, or a legal claim, and only for as long as that purpose requires.
We take reasonable measures to protect your information. Account passwords are hashed before storage. API keys are stored in your operating system's secure credential store by default. If you opt in to API key sync, your keys are encrypted before transmission and stored in encrypted form on our servers. Chat data synced to our servers is stored securely. Account and synced data is hosted on Neon's managed PostgreSQL infrastructure in the United States. Records of requests to AgentOne-provided models are stored on servers we operate, with access limited to authorized personnel. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
The Service is not intended for anyone under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly.
We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. We encourage you to review this policy periodically. Your continued use of the Service after any changes constitutes acceptance of the updated policy.
If you have any questions about this Privacy Policy or your data, contact us at [email protected].