Privacy Policy

Last updated: June 10, 2026

The privacy of your data — and it is your data, not ours! — is a big deal to us. In this policy, we lay out: what data we collect and why; how your data is handled; and your rights with respect to your data. We promise we never sell your data: never have, never will.

This policy applies to Agent Sky, the service operated at useagentsky.com.

What we collect and why

Our guiding principle is to collect only what we need. Here's what that means in practice:

Identity and access

When you sign up for Agent Sky, we ask for an email address and password so you can sign in and we can send you essential information about your account. Your password is stored as a one-way hash — we never store it in plain text. If you sign up or sign in with Bluesky, we also store your Bluesky handle, DID, and avatar so we can show you which account is connected.

We'll never sell your personal information to third parties, and we won't use your name or handle in marketing statements without your permission.

Bluesky credentials

To act on your behalf, Agent Sky stores the credentials you provide for your Bluesky account — either an app password or OAuth tokens, depending on how you connect. These credentials are used solely to perform the actions you configure (such as following and unfollowing accounts) and to read the public Bluesky data needed to do so. You can revoke this access at any time by disconnecting your account in Agent Sky or revoking the app password or OAuth grant in Bluesky's settings.

Product interactions

We store the data generated by your use of Agent Sky — for example, the accounts suggested to you, follow and unfollow activity, and follower statistics. This is so the product can work as intended and you can see what it has done on your behalf. We keep this data as long as your account is active.

Billing information

If you upgrade to a paid plan, your payment is handled by Stripe. Your card details are submitted directly to Stripe and never touch our servers. We keep a record of the transaction for account history, invoicing, and billing support.

Website interactions

We do not run third-party analytics or advertising trackers on useagentsky.com. We use first-party cookies only to keep you signed in and to remember preferences like your theme. Our server logs include IP addresses for security and fraud-prevention purposes.

Voluntary correspondence

When you email us with a question or ask for help, we keep that correspondence, including your email address, so that we have a history to reference if you reach out in the future.

When we access or disclose your information

To provide the Services you've requested. We use a small number of third-party subprocessors to run Agent Sky:

Stripe — payment processing
Amazon Web Services (SES) — transactional email
Hetzner — cloud hosting

No Agent Sky human looks at your data except for limited purposes with your express permission — for example, to help with a support request — or if an error stops an automated process and requires manual intervention, in which case we look at the minimum needed to fix it.

To investigate, prevent, or take action regarding abuse. Accessing an account when investigating potential abuse is a measure of last resort.

When required under applicable law. We will only preserve or share customer data if compelled by a government authority with a legally binding order, and our policy is to notify affected users before we disclose data unless we are legally prohibited from doing so.

Aggregated and de-identified data. We may use aggregated or de-identified information — which cannot reasonably identify you — for purposes such as understanding product usage and improving the Services.

Finally, if Agent Sky is ever acquired by or merges with another company — we don't plan on that, but if it happens — we'll notify you well before any of your personal information is transferred or becomes subject to a different privacy policy.

Your rights with respect to your information

We strive to apply the same data rights to all customers, regardless of location:

Right to know what personal information is collected, used, or shared — this policy is our answer.
Right of access to the personal information we have about you.
Right to correction of your personal information.
Right to erasure — request that your personal information be deleted from our possession. Deleting some data may mean we close your account, because the product can no longer work without it.
Right to portability — receive a copy of the personal information we have about you.
Right to complain to the appropriate supervisory authority about our handling of your personal information.

Many of these can be exercised by signing in and updating your account. For anything else, contact us and we'll help. We may need to verify your identity before responding to a request.

How we secure your data

All data is encrypted via SSL/TLS when transmitted between our servers and your browser, and between our servers and Bluesky. We make regular backups of our database so your data isn't lost. Credentials are stored only as long as your account needs them, and passwords are stored only as one-way hashes.

Data retention

We keep your information for as long as your account is active and as needed to provide the Services. If you delete your account, your data — including stored Bluesky credentials — is permanently removed from our active systems within 30 days. We may retain minimal billing records as necessary to comply with legal and tax obligations.

Location of site and data

Agent Sky is operated in the United States. If you are located in the European Union, UK, or elsewhere outside of the United States, please be aware that any information you provide to us will be transferred to and stored in the United States. By using our Services and providing us with your personal information, you consent to this transfer.

Changes and questions

We may update this policy as needed to comply with relevant regulations and reflect new practices. Whenever we make a significant change, we will refresh the date at the top of this page and take appropriate steps to notify users.

Have any questions, comments, or concerns about this privacy policy, your data, or your rights? Please get in touch and we'll be happy to help!

Adapted from the Basecamp open-source policies / CC BY 4.0.