AgentDoorman

Privacy policy

Last updated 9 October 2026

AgentDoorman lets your AI agent use your apps, under rules you set. This page says what we keep, what we deliberately don't, and who helps us run the service.

What we keep

  • Your account: sign-in is handled by Clerk, which holds your email address and name.
  • Your settings: House Rules, which apps are look-don't-touch, the lock, your time zone and Night Report time.
  • Your agents: their names and a one-way hash of each agent's key (never the key itself).
  • Your connected apps: the app name and the id of the connection at Composio.
  • The Guest Book: for each agent call, the tool's name, the app, what the rules decided, whether it ran and how long it took. Not what was sent or read.
  • Telegram: your chat id, so the Bell and Night Report reach you.
  • Billing: your Dodo Payments customer and subscription ids, plan and status, and a count of calls used.
  • The free trial: so each email gets one trial, we keep a one-way, keyed hash of your email address (lower-cased, without a "+tag", and for Gmail without dots) — not the address itself.
  • The waitlist: if you join it, your email address and the page you joined from, until we invite you or you ask us to remove it.

What we don't keep

  • No passwords, OAuth tokens or API keys for your apps. You sign in to each app on its own page and Composio holds the access; we only keep the connection's id.
  • No content of your emails, messages or files in our logs.
  • A send waiting for your OK is kept encrypted for at most 30 minutes and deleted as soon as you decide. A result your agent fetches later is kept encrypted for 15 minutes.
  • No card details: Dodo Payments handles payment.

Who helps us run it

  • Clerk — sign-in and accounts.
  • Neon — our database.
  • Vercel — hosting.
  • Composio — connecting to your apps and holding their access.
  • Telegram — the approval messages and Night Report.
  • Dodo Payments — payments, as merchant of record.

We don't sell your data or use it for advertising.

Short-lived technical data

To stop abuse we count requests per agent and per IP address in time windows of a few minutes; those counters are deleted automatically.

Deleting your data

Delete your account from the dashboard at any time. That removes your connections at Composio, stops any subscription and deletes everything we keep about you, except the keyed hash of your email address that stops a second free trial — it can't be turned back into your address. Dodo Payments keeps the payment records the law requires of a merchant of record.

Contact

Questions or requests about your data: hello@agentdoorman.com