AgentDx Privacy Policy

The short version

• You sign in with Apple, Google or email. We keep your email address, your plan and the devices you are signed in on.
• Stripe handles payment. We never see or store your card number.
• Your prompts and the org context the agent reads go to Anthropic through our servers, which pass them on without storing or logging them. We record how many tokens each request used and what it cost, never its content.
• The app sends us no telemetry, analytics or crash reports, and turns telemetry off in the tools it runs. Salesforce API calls go straight to your org.
• This website counts visits with Vercel Web Analytics, which uses no cookies.

Who we are

AgentDx and this website are published by KineticBit Inc. (“we”, “us”), the company behind KineticBit. You can reach us at hello@kineticbit.io.

What stays on your Mac

AgentDx keeps its working data in its own folder on your Mac. None of it is sent to us:

• the index of each org you connect: its objects, automation, code, permissions and the other metadata AgentDx reads;
• the change journal, including the “before” copies AgentDx takes of what a change will overwrite, so it can undo it. For record changes these can include field values from your org;
• your conversations with the agent, and the answers you gave to questions it asked (its decision memory);
• files you attach to a message, copied into the session that uses them;
• your settings, and diagnostic logs in ~/Library/Logs/AgentDx. Logs never leave your Mac unless you choose to send one to us.

Deleting AgentDx’s data folder, or the app and its data, removes all of this.

Your AgentDx account

You sign in with Apple or Google in your own browser, or with a code we email you. Sign-in is run by Supabase on our behalf. We receive your email address (with Apple, it can be a private relay address Apple creates for you), and keep it with your account, your plan and a list of the Macs you are signed in on.

Once you sign in, the app holds a device token for this Mac, stored encrypted with the macOS Keychain and never written to your project or to logs. We keep only a one-way hash of it. Signing out, from the app or the AgentDx menu, revokes it.

Payments

Checkout, billing, receipts and the page where you manage your subscription are run by Stripe. Stripe receives your payment details and billing address and handles them under its privacy policy. We receive and keep what we need to run your subscription: its plan, its status, its renewal and trial dates, and Stripe’s identifiers for you and for it. We never see or store your card number.

Your Salesforce connections

You sign in to Salesforce in your own browser. AgentDx uses the Salesforce CLI’s public connected app, with PKCE, and the connection is saved by Salesforce’s own libraries in the Salesforce CLI auth store on your Mac, the same store the sf command uses. AgentDx keeps no Salesforce passwords or tokens of its own. You can disconnect an org in AgentDx, or remove it with sf org logout.

What goes to Anthropic

To answer and to build, the agent sends Anthropic’s API your prompts, the files you attach, and the org context it reads to do the work: metadata, code, query results and, when a task needs them, record data. These requests go from your Mac to AgentDx’s servers, which check that your plan is active and pass them to Anthropic under AgentDx’s own account. Our servers do not store or log what a request or its answer says.

Anthropic processes these requests as our service provider under its commercial terms, which do not allow it to train its models on them. Anthropic keeps API data for a limited time for safety and legal reasons, as its privacy policy describes.

Usage records

Each plan includes an allowance of agent usage. To keep track of it we record, for every request the agent makes: when it was made, which session and kind of request it belonged to, how many tokens it used, and what it cost. These records never contain the request’s content. The app shows you how much of your allowance is used.

What goes to Salesforce

AgentDx calls your org’s APIs to read it and to make the changes you ask for. That traffic goes straight from your Mac to Salesforce and is governed by your organization’s agreement with Salesforce.

Update checks

Every six hours, and whenever you choose AgentDx → Check for Updates…, the app asks this site whether a new version exists and, if one does, downloads it. Like any web request, this one reaches our host, Vercel, with your IP address and basic technical details such as the app’s user agent. It carries no account or org information, and we do not use it to identify you. The app also asks this site for current prices, and, when you are signed in, for your plan’s status.

No telemetry

AgentDx itself sends no analytics, usage data or crash reports. It also turns telemetry off in the tools it runs: the bundled Claude agent runs with non-essential traffic disabled, and the Salesforce MCP server and the bundled Salesforce plugin run with Salesforce’s telemetry disabled.

This website

This site is hosted by Vercel. It counts page views with Vercel Web Analytics, which uses no cookies and does not follow you across other sites. Vercel also keeps standard server logs, including IP addresses, to run and protect the service. The site sets no cookies of its own and has no forms. App downloads are served from Vercel’s storage.

Who processes your data

• Vercel hosts this website and the AgentDx servers.
• Supabase runs sign-in and stores your account, subscription and usage records.
• Stripe processes payments and runs billing.
• Anthropic runs the Claude model the agent uses.
• Apple and Google confirm who you are when you sign in with them.

We do not sell your data or share it for advertising.

How long we keep it

We keep your account, subscription and device records while your account exists, and usage records for up to thirteen months. Stripe keeps billing records as the law requires. If you ask us to delete your account, we delete what we hold, except what we must keep by law.

Children

AgentDx is a tool for professionals and is not directed at children.

Your choices and rights

You can ask us for a copy of the account, subscription and usage data we hold about you, to correct it, or to delete your account. Email us from the address you sign in with and we will answer. You can cancel your subscription at any time from the app. Data you send to Salesforce is handled under your organization’s agreement with it.

Changes

If this policy changes, the new version will be here with a new date at the top, and material changes will be noted in the changelog.

Contact

hello@kineticbit.io, KineticBit Inc., publisher of AgentDx.