Privacy Notice
How Agentcraft processes account, workspace, integration, and website data.
Last updated: 29 October 2026
Who we are
Agentcraft Bilgi Teknolojileri Anonim Şirketi is responsible for personal data processed to manage our website, accounts, billing relationships, and support. Address: Kirazlıdere Mah. Eski Ankara Cad. No: 4B, İç Kapı No: 16, Çekmeköy/İstanbul, Türkiye. Contact: info@agent-craft.ai. For project data handled on an organization's instructions, that organization may act as the controller and Agentcraft as its service provider.
Information we collect and how
We receive information through registration and account forms, support communications, connected services, and your use of the platform. This includes name and email, organization and membership details, subscription identifiers and billing status, prompts and conversations, uploaded files, repository code and project records, integration credentials, agent outputs, execution records, and technical logs. Connected tools provide information within the access you authorize. Payment details are collected by the checkout provider; our billing integration receives transaction and subscription information rather than your card security code.
Why we process information
We use account and membership information to provide access and administer your subscription; workspace content and integration credentials to execute requested workflows; transaction information for billing and accounting; support messages to respond to requests; and technical records to diagnose faults and protect the service. We process data necessary to perform a contract, comply with legal obligations, establish or defend rights, or pursue legitimate interests in service security and support, where those interests do not override your rights. Where a processing activity requires consent, consent is the applicable basis rather than acceptance of this notice.
AI providers and connected tools
Your workflow may send prompts, code, files, and project context to AI providers such as OpenAI or Anthropic and to the integrations you connect, including GitHub, GitLab, Jira, Figma, and AWS. Agent execution occurs in server-hosted workspaces. Using your own AI credentials does not mean processing stays on your device. Provider-specific handling, retention, and training terms depend on the service and account used; this notice does not promise that third-party processing is local or excluded from training in every configuration. Only submit data you are authorized to share.
Personal Gmail connections
Gmail access is optional and separate from signing in with Google. When you connect a personal Gmail account, Agentcraft requests permission to read email and send email on your behalf. Requested email searches and summaries can process sender information, subjects, message text, and related metadata on our servers and through the AI provider used for your assistant. Initial recognition requires a separate selection of the review period, up to 30 days and 200 messages; reliable facts from that review may be saved in your personal assistant memory. You can edit or forget those facts in Memory. A connected account can also be used for email questions you request after that initial review. Prepared outgoing messages show the sending account, recipients, subject, body, and attachments; sending requires your confirmation in the app. Outgoing proposals and attachment snapshots are stored encrypted, while related conversation and execution records may also contain email-derived data. Removing a connection revokes its Google token and prevents future use of that connection; it does not automatically erase existing memories, conversations, or outgoing message records. Contact info@agent-craft.ai to request deletion of retained Gmail data and derived records. Gmail features are currently undergoing testing and public-access verification.
Recipients and international processing
Hosting and infrastructure providers process workspace and technical data to run the service. AI and integration providers process the data needed for your selected workflows. Payment providers process billing information, and communication providers deliver account and support messages. Organization administrators can access information made available by their role. We may also disclose information where legally required or necessary to establish or defend rights. Providers may process information outside Türkiye or your country. For details about recipients, processing locations, or the transfer arrangements applicable to your account, contact info@agent-craft.ai.
Cookies and website analytics
Authentication and preference cookies support login and language selection. Where configured, Google Analytics measures public marketing-page visits and interactions such as registration and pricing clicks, using page, device, and interaction information. The marketing analytics integration excludes protected application routes. Browser controls can restrict or remove cookies; restricting essential cookies may affect login. Contact us with questions about analytics or privacy choices.
Retention and deletion
Retention depends on the type of record and why it is needed: account and workspace information supports the service, while billing and legal records may need to be retained for statutory obligations or disputes. Backup and operational records may have different deletion cycles. Cancelling a subscription does not automatically erase workspace data. Contact us to request deletion or information about the retention period applying to a specific category. We may retain records where an applicable legal obligation or the establishment or defence of rights requires it.
Your rights
Subject to applicable law, you may ask whether we process your personal data, request access and information about purposes and recipients including overseas recipients, request correction or deletion, and ask for relevant corrections or deletions to be communicated to recipients. You may object to adverse results based solely on automated analysis and seek compensation for unlawful processing under KVKK. Where applicable, you may also request restriction or portability, object to processing, withdraw consent without affecting prior lawful processing, and complain to the competent data protection authority. Send requests to info@agent-craft.ai; we may need to verify your identity. If your organization controls the data, we may direct your request to its administrator.
Updates
We update this notice when our processing practices change. Material changes will be communicated where required. This notice describes processing; it is not a request for consent to unrelated marketing or third-party access.