— Legal

Privacy Policy

Last updated: May 8, 2026

1. Who We Are

Agency Ape ("we", "us", "our") operates the Agency Ape platform (the "Service"). This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that information.

2. Information We Collect

Information you provide:

  • Account details: name, email address, password (hashed).
  • Billing details: handled by Stripe — we never see or store your full card number.
  • Content you create: prospects, clients, proposals, calendars, notes, branding assets, AI prompts you submit.
  • Support messages and emails you send us.

Information collected automatically:

  • Log data: IP address, browser type, device info, pages visited, timestamps.
  • Usage data: features used, API calls made, error reports.
  • Cookies and similar technologies (see section 6).

Information from third parties:

  • Authentication providers (e.g. Google) if you sign in with them — typically your name, email, and avatar.
  • Publicly available business data from sources like Google Places, used to populate Lead Finder results.

3. How We Use Your Information

  • To provide, maintain, and improve the Service.
  • To process payments and manage subscriptions.
  • To send transactional emails (account, billing, security, product updates).
  • To respond to support requests.
  • To detect, prevent, and address fraud, abuse, and security incidents.
  • To comply with legal obligations.
  • To send marketing emails — only if you have opted in. You can unsubscribe at any time.

4. Third-Party Services (Sub-Processors)

We share data with vetted third-party services that help us run the Service:
  • Supabase — database, authentication, file storage.
  • Stripe — payment processing and subscription billing.
  • Cloudflare — hosting, CDN, security.
  • Google Places API — public business data for Lead Finder.
  • AI model providers (e.g. Google, OpenAI via Lovable AI Gateway) — to generate scripts, proposals, and other AI assets from prompts you submit. Your prompts and generated content are processed by these providers under their respective terms.
  • Email delivery — to send transactional and account emails.

We do not sell your personal data. We do not share it with advertisers.

5. AI Prompts & Generated Content

When you use AI features, the prompts you submit and the content generated may be transmitted to third-party AI providers for processing. Do not include sensitive personal information (e.g. social security numbers, health records, financial account numbers) in prompts. We do not use your prompts or generated content to train AI models.

6. Cookies

We use cookies and similar technologies to:
  • Keep you signed in (authentication cookies).
  • Remember your preferences.
  • Understand product usage (analytics).

You can disable cookies in your browser, but parts of the Service may not work properly.

7. Data Retention

We retain your account data for as long as your account is active. After you delete your account, we delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, tax, or audit purposes (e.g. payment records). Backups containing deleted data are purged within 90 days.

8. Security

We use industry-standard technical and organizational measures to protect your data, including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews. No system is 100% secure. You are responsible for keeping your password confidential and for any actions taken under your account.

9. Your Rights

Depending on your jurisdiction (e.g. EEA/UK under GDPR, California under CCPA), you may have the right to:
  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Delete your data ("right to be forgotten").
  • Export your data in a portable format.
  • Object to or restrict certain processing.
  • Withdraw consent for marketing emails at any time.

To exercise these rights, email Agencyapeglobal@gmail.com. We will respond within 30 days.

10. International Data Transfers

Our infrastructure is located primarily in the United States. If you access the Service from outside the US, your data will be transferred to and processed in the US and other countries where our service providers operate. We rely on appropriate safeguards (such as Standard Contractual Clauses) where required.

11. Children

The Service is not directed to children under 18. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us personal data, contact us and we will delete it.

12. Outreach to Leads & Clients

When you use the Service to contact leads or clients (via Lead Finder, outreach packs, proposals, etc.), YOU are the data controller for that outreach. You are responsible for complying with applicable laws (CAN-SPAM, TCPA, GDPR, CASL, etc.), maintaining lawful basis for contact, honoring opt-out requests, and any other privacy obligations.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice. The "Last updated" date at the top of this page reflects the latest version.

14. Contact

For privacy questions or to exercise your rights, email Agencyapeglobal@gmail.com.