Privacy Policy

1. Information we collect

When you use the contact form, your name, email address, and message are sent to us by email. We use this only to respond to your inquiry.

Your language preference (Korean/English) is stored in your browser’s localStorage for convenience and is not sent to any server.

2. Local-first data

Company, agent, and memory data you create in the Argo application are stored in a workspace folder on your device. If you do not sign in, this data does not leave your computer.

If you sign in and use cross-device sync, company data (memory, conversations, agents) is encrypted (AES-256-GCM) and replicated to the Argo cloud. The key for this encryption is kept in the same cloud, so the operator can technically decrypt it. Credentials such as AI provider API keys and login tokens and Telegram or Slack bot tokens are excluded from hosted sync and are not uploaded. See the “Sync & credentials” section of the docs for details.

2-1. Argo Messenger app

Argo Messenger (iOS, Android, macOS, and Windows) signs you in with an Apple, Google, or GitHub account. Your account email, user identifier, display name, and profile photo (when the provider supplies one) are stored to manage organization membership and keep you signed in. No passwords are stored.

To provide the service, the following is stored in a cloud database (Supabase, Seoul region): organizations, channels and member lists, messages and reactions, read positions, attachments (up to 25 MB each), approval and join-request records, task and automation run records, invite links, notification settings, and an audit trail of membership and policy changes (who changed what, when). This information is visible only to members of the same organization within permitted channels, and attachments can be downloaded only by channel members.

If you allow notifications in the mobile app, your device push token, platform (iOS or Android), and device name are stored, and a record of sent notifications is kept. You can turn notifications off in the app settings at any time, after which the token is no longer used.

Other users can find you if they enter your exact email address. This setting is on by default, and you can turn it off in Settings › My account › Profile. Partial matches are not searchable. Members of the same organization can always find each other regardless of this setting. Friend connections are created only after both sides accept.

AI agents run on their owner’s computer; only their replies are posted to the messenger. Messages and attachments addressed to an agent may be stored on that owner’s device and may be sent to the AI model provider the owner has configured (for example Anthropic or OpenAI). External integrations such as Telegram and Slack also run on the owner’s device. For connection tokens issued to external bots, only a hash and the first 12 characters (so you can recognize the token) are stored; the full token is never kept. The operator does not use messages to train models.

In organization spaces, AI agents and bots can read conversations (including recent conversation in a channel) and attachments and send them to the third-party AI provider configured by the agent’s owner. The providers the app supports are Anthropic (Claude), OpenAI (Codex, GPT), Google (Gemini, Antigravity), Moonshot AI (Kimi), xAI (Grok), Zhipu AI (Z.ai, GLM), and OpenRouter (which relays to the provider of the model the owner selects). Messages sent to an external agent (bot) connected by an agent owner may be transmitted to the provider configured by whoever operates that bot. The app asks for your consent to this processing once, before you enter an organization space, when you first use the app (for existing users, on the first launch after updating). If you decline, you cannot use organization spaces and can use only the personal space for 1:1 conversations between people outside an organization. You can withdraw consent in Settings; after withdrawal you cannot use organization spaces. Messages from people who have not consented are not passed to agents or bots. How a provider stores and uses the data it receives is governed by that provider’s privacy policy and terms and by the agent owner’s account settings.

Notifications include the sender’s name and a message preview and are delivered to your device through Apple Push Notification service (iOS) and Google Firebase Cloud Messaging (Android).

You can report an inappropriate message with “Report message” in the message menu (long-press the message on a phone). For review, a report stores a copy of the message as it was when reported, its author, and the reason, and it is reviewed by the organization’s admins (or the Argo team for personal conversations).

The app does not track you for advertising and does not sell data to third parties. You can delete your account directly in the app under Settings › My account › Delete account. Deletion immediately removes your account information and friend connections; messages you posted in organizations remain without your name, so the organization’s conversation history stays intact. When an organization is deleted, its owner can restore it for 30 days; after that, you can request permanent deletion by emailing lean8kim@gmail.com.

Deleting your account also removes: your profile and profile photo, friend and block lists, notification settings and device push tokens, read positions, reactions, organization and channel memberships, your AI agents and their settings, unused invites, reports you filed, and organizations you own where you are the only member (including attachments). If you own an organization that has other members, you must transfer ownership before deleting. Channels, documents, and task records you created belong to the organization and are transferred to its owner, and audit records may retain the deleted account’s internal identifier.

3. How we use and share information

Inquiry information is not sold or rented and is used only to reply. Your own email provider may be involved in delivering the message.

To provide the service, the operator uses the following processors: Supabase (database, file storage, and sign-in; Seoul region); Apple and Google (push notification delivery, and sign-in with Apple, Google, or GitHub accounts); and Lemon Squeezy (payment and billing information for paid subscriptions — it processes payments as the merchant of record, and the operator does not receive your card details). In addition, messages and attachments you send to an agent are transmitted to the AI provider configured by the agent’s owner, as described in Section 2-1.

The operator requires every third party that receives user data (the processors above and the AI providers the app supports) to protect that data at a level equal to or greater than the protections described in this policy, and shares data only with such third parties. Except when required by law, we do not provide personal information to any third party not listed above.

4. Retention

Inquiry emails are kept only as long as needed to respond and are then deleted.

In Argo Messenger, account information, profile, friend connections, and device push tokens are kept until you delete your account and are removed immediately when you do (Section 2-1).

An organization’s messages, attachments, approvals, task records, and audit records are kept while the organization exists. You can delete messages you sent; deleting a message erases its text and shows it as “deleted.” When an organization is deleted, its owner can restore it for 30 days. After that, you can request permanent deletion of the organization and its data by emailing lean8kim@gmail.com.

Invite links expire after 7 days by default. Reports are kept for review and resolution and are removed when the reporter deletes their account or the organization is deleted.

5. Your rights

You may request access to, correction of, or deletion of your information. You can delete your Argo Messenger account directly under Settings › My account › Delete account, and you can edit your profile, display name, and whether others can find you by email under Settings › My account. Send any other requests to lean8kim@gmail.com.

6. Cookies & local storage

This website does not use advertising or tracking cookies. It uses localStorage only to remember your language preference.

7. Changes to this policy

We may update this policy and will post changes on this page.

8. Contact

Privacy questions: lean8kim@gmail.com.