Privacy policy

What you give Agella

These are the things you put in.

Account information.

Your email address. Your name and profile photo as well, if you sign in with Google. This is used to sign you in and to contact you about your account.

Your work.

Documents and recordings you upload, posts you paste in or write, your LinkedIn profile if you add it, what you tell Agella about yourself and your work, and anything you type or dictate into the app. This is the material Agella learns from, and it is the point of the product.

Documents.

Files you upload, such as PDF, Word (.docx), PowerPoint (.pptx), plain text, markdown, CSV, HTML, saved email (.eml) and subtitle files. These are stored and their text is extracted.

Recordings.

Audio and video files you upload, such as a recorded call, a talk or a voice memo. The file is stored, sent to the Gemini API to be transcribed, and the transcript is kept as material. Agella uses a transcript to learn what you know and, where it has none of your own writing for a form, how you speak; it never uses a transcript to learn how you write posts. A voice note you dictate is transcribed by your browser’s own speech recognition where it has one (Google runs it in Chrome, Apple in Safari), and otherwise by the Gemini API. Only the text is kept.

Your LinkedIn data export.

Only if you add it. You download it from LinkedIn yourself, and Agella opens it in your browser. It reads your profile, your posts and your comments from it. Your messages, your connections and every other file in the export are never opened and never leave your computer.

Meeting transcripts.

Only if you connect a calendar and turn recording on. This is covered separately below, because it is the most sensitive thing Agella handles.

Billing information.

Your subscription status, your Stripe customer and subscription identifiers, and the dates your trial and billing period end. Agella does not receive or store your card number. You enter that on Stripe. On a free pilot account, Agella keeps your email on the pilot list and a mark on your account saying it is a pilot, and you never go through Stripe checkout.

What Agella makes from it

Agella reads what you give it and derives things from it. Those derived things are stored in your account:

• a measured model of how you write and how you talk, including the voices Agella has found for each kind of writing you do and the rules you have given it
• what you know and the claims you have made, each with the date and the source it came from
• drafts, ideas and post images Agella has made
• a record of what you published, what you edited before publishing, and what you dismissed
• counters that record how often you use each feature, which is how usage limits are enforced

All of this is visible to you in the app, and it goes when you delete the profile it belongs to.

Agella also records, for each account, how much it uses the AI models and the other services in the table below, and what that costs. This is kept to run the service, to price it and to catch runaway use. It holds counts and amounts, not your material.

Meetings, recording and transcripts

Agella can join meetings on your calendar and turn them into a transcript. This is off until you turn it on. Here is exactly what happens when you do.

• You connect a Google Calendar or an Outlook (Microsoft 365) calendar. For Google, Agella asks for read only access to your calendar events and for your email address. For Outlook, it asks Microsoft for the Calendars.Read permission, which is read only access to your calendars, for your email address, and for permission to stay connected without asking you to sign in again. It does not ask either one for access to your mail, your contacts, your files, or anything else.
• Recall.ai, a third party, holds the calendar connection on Agella’s behalf. It reads your upcoming events so Agella can show them to you and send the notetaker to the ones you choose.
• You choose which meetings Agella joins. A newly connected calendar joins nothing until you turn on a specific meeting from your Meetings page. You can change that in Settings to let it join every meeting that has a video link.
• A bot joins the meeting as a visible participant, under a name you choose. It appears in the participant list the way any other attendee does. It does not join invisibly.
• Recall.ai processes the meeting and produces the transcript.
• Recall.ai keeps a call’s recording and transcript only until Agella has saved the transcript in every profile the call was recorded for. Agella then has Recall delete them. A delete that fails is tried again every day, and a call Agella never manages to save is deleted at Recall six days after it ended. Deleting the call, its profile or your account deletes Recall’s copy too: at once, unless the call is still going on or another profile has not saved it yet, in which case it is deleted as soon as that is no longer true.
• Agella receives the transcript text. It does not request, receive or store audio or video of your meetings.
• For a meeting the notetaker joins, Agella keeps the email addresses of the people invited (not yours, and not meeting rooms or groups) with that meeting’s transcript. It uses them only to find your earlier calls with the same people when it prepares a brief before your next meeting with them, which only you see. They are never shown to anyone else, never written to logs, and they are deleted when you delete that call, its profile or your account.
• Where clients are turned on, Agella reads the email domains of the people you meet to suggest which companies and people are your clients, and keeps only the clients you confirm or dismiss: each one’s name, its email domains and addresses, and which of your calls, documents and drafts belong to it. This is done by Agella’s own code, not sent to any AI provider, shown only to you, never written to logs, and deleted when you delete that client, its profile or your account.

Agella uses your calendar events only to show you your upcoming meetings, to send the notetaker to the ones you choose, and to suggest something to write before or after a notable event, which keeps that event’s title and date in your account and sends them to Anthropic when you draft from it, and to prepare a brief before a meeting the notetaker joins, which sends that meeting’s title, time, invitees and description to Anthropic. It does not sell them, use them for advertising, or use them to train AI models, and no person reads them unless you ask for help, it is needed for security, or the law requires it. Agella’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

The same limits apply to Outlook. Information Agella receives from Microsoft Graph is used only to show you your upcoming meetings, to send the notetaker to the ones you choose, and to suggest something to write before or after a notable event, which keeps that event’s title and date in your account and sends them to Anthropic when you draft from it, and to prepare a brief before a meeting the notetaker joins, which sends that meeting’s title, time, invitees and description to Anthropic. It is not sold, not used for advertising, not used to train AI models, and not read by any person unless you ask for help, it is needed for security, or the law requires it.

The transcript becomes material in your profile, the same as a document you upload. Agella reads it to learn how you talk, to find things worth writing about, and to ground what it writes in what you actually said.

Who else handles your data

Agella is built on other companies’ services. Each one below is a separate business with its own terms.

Agella does not sell your data. It does not share your data with advertisers or data brokers. There is no third party receiving your data that is not in the table above.

Whether Anthropic or Google uses material sent to their APIs to improve their own models is governed by their terms for those APIs, not by this policy. If you are not willing for your material to be sent to a third party model, Agella is not the right product for you, because writing in your voice from your own work is not possible without it.

Tracking and cookies

Agella does not use analytics products, advertising pixels, or cross site trackers. There is no Google Analytics, no advertising network, and no third party measuring what you do inside the app.

Your browser stores what is needed to keep you signed in, and a small number of preferences such as whether the sidebar is collapsed. These stay in your browser.

No page embeds video, fonts or widgets from a third party. Google reCAPTCHA, listed above, runs on every page, the public ones included, to check that requests come from the real app, and can set its own cookies under Google’s policy.

Logs

Vercel, which runs the site, keeps a log of requests made to it. Agella writes its own diagnostic logs recording which step ran, whether it succeeded, and identifiers and counts. Where the code logs configuration, it records whether a value is present and how long it is, never the value itself.

Logs are not designed to hold your material, and the code does not deliberately write it to them. Error messages returned by third party services can occasionally contain a fragment of the data that caused the error, and those messages are logged.

How long it is kept, and how to delete it

Deleting a profile.

You can delete any profile from the app. That removes the profile, everything Agella derived from it, every document and recording you uploaded to it, every image made in it, and Recall.ai’s copy of the calls recorded for it. If Recall.ai cannot be reached, nothing is deleted and the app tells you, so you can try again. It cannot be undone.

Deleting your account.

In Settings, choose Delete account, type the email you sign in with, and sign in again (your password, or Google). Agella then deletes Recall.ai’s copy of your calls, disconnects your calendar from Recall and cancels any bots already scheduled, so no bot joins your meetings; cancels your subscription at once, so nothing more is charged; deletes every profile exactly as deleting a profile does; deletes the files and records kept for your account rather than for a profile, including your calendar connection, your usage counters and, if your email is verified, anything kept under it, such as your email on the pilot list; deletes your sign-in; and signs you out. If Recall’s copy of your calls cannot be deleted, or your calendar or your subscription cannot be stopped, nothing is deleted and the app tells you, so you can try again. It cannot be undone. Cancelling this way does not refund anything by itself: if you are within the refund window in the terms, email ben@benjaminhead.com. You can also email ben@benjaminhead.com and your account will be deleted for you.

Two things outlive a deletion. Stripe keeps its own billing records for as long as its own obligations require. Deleted data can remain in the database provider’s system backups for a limited period before those backups age out.

Access to your data

Your data is stored in Google Cloud, which encrypts data at rest and in transit as part of that service. Database rules restrict each account to its own data, and those rules are tested against an emulator on every change.

How sensitive data, including calendar data received from Google and Microsoft, is protected:

• Encryption in transit. Every connection to Agella uses HTTPS (TLS), and the site tells browsers to refuse unencrypted connections to it (HTTP Strict Transport Security).
• Encryption at rest. Your account, your material, your transcripts and the calendar event details Agella keeps are stored in Google Cloud (Firebase), which encrypts them at rest.
• Calendar access tokens. Agella never sees or stores your Google or Microsoft password. The lasting permission to read your calendar is held by Recall.ai, which keeps the calendar connection on Agella’s behalf. Agella does not save a calendar access token in its database; when it needs one, its server asks Recall for a short lived token and keeps it only in memory.
• Least access. Agella asks Google and Microsoft only for read only access to calendar events and for your email address, never for your mail, contacts or files.
• Access control. Database and file storage rules let each account read and write only its own data, and fields that control billing or calendar connections can be written only by Agella’s server. Calendar data is used only for the purposes described in the Meetings section and is never sold, used for advertising or used to train AI models.
• Keys and signatures. The keys Agella uses to reach other services are kept in its hosting provider’s encrypted settings, never in its code, and every change to the code is scanned for secrets before it is saved. Messages from Recall.ai and Stripe are checked against their signatures before Agella acts on them.
• Deletion. Disconnecting your calendar ends Agella’s access to it, and deleting your account deletes your calendar connection and the calendar event details Agella kept, as described above.
• If a breach affects your data, Ben Head will tell you by email without undue delay, along with what happened and what was done about it.

Ben Head, as the operator, can read accounts in order to provide support and to diagnose problems.

Your choices

You can see everything Agella holds about you from inside the app, and you can delete it there.

If the law where you live gives you rights over your personal data, such as access, correction, portability or deletion, email ben@benjaminhead.com and say what you want. You will get a reply.

Age

Agella is a professional tool for people aged 18 and over. It is not intended for children and does not knowingly collect their information.

Changes to this policy

This policy will change as the product changes. The effective date at the top says when the current version took effect. If a change materially affects what happens to your data, you will be emailed about it before it takes effect.

Contact

Questions about this policy, or about your data, go to ben@benjaminhead.com.