Privacy Policy

1. Controller and scope

Make Agent Fast is the operator responsible for account, billing, platform, and support data. When an owner enables an agent and collects visitor leads or conversations for their own business, that owner is the controller of that visitor information and Make Agent Fast processes it on the owner's behalf under our Data Processing Addendum (makeagent.fast/dpa).

2. Personal information we collect

• Account data: name, email, password hash, OAuth identifiers, language, authentication and session records.
• Billing data: plan, subscription, checkout, payment status, tax location, and limited payment metadata. Full card details are handled by payment providers.
• Workspace and agent data: company names, prompts, files, links, PDFs, knowledge sources, appearance settings, and embed or go-live metadata.
• Visitor data: messages, conversation timestamps, lead details, booking details, voice recordings or transcripts when voice features are used, and approximate technical metadata.
• Device and log data: IP-derived security signals, browser information, remembered login email when you choose that option, error logs, rate-limit records, and usage events needed to operate and protect the service.
• Product analytics: on every visit, SaaS Pro, our own analytics product, counts page visits and the campaign link you arrived from, and measures click and scroll heatmaps (page-region shapes and click positions only) and page speed (load and responsiveness timings and slow resources, with the page path and referring site), without cookies or stored identifiers. When you create an account, the visit you signed up from is linked to it. Account milestones such as signup, setup steps, channel connections and billing are recorded against your account to measure and improve onboarding. With your agreement, we also remember this browser between visits, record sessions that hide all text and exclude form entries and messages, and use the Meta Pixel and Meta's Conversions API to measure our own advertising: Meta receives the pages you view and, when you sign up, start a trial or reach other account milestones, that event with your email address and account ID in hashed (SHA-256) form, your IP address and browser type. Meta uses this to measure and improve the delivery of our ads under its own terms. In the EU, the UK, Korea and every other country, these start only after you choose Agree. In the United States, Canada, Australia, New Zealand and Uzbekistan, remembering your browser and Meta measurement are on until you choose Disagree; session recordings still start only after Agree. Disagree stops remembering your browser, session recordings and Meta measurement. A Do Not Track or Global Privacy Control signal stops all browser analytics and Meta measurement. You can change each choice on this page.
• PostHog (United States) also processes pseudonymous account milestones, verified billing amounts and AI provider token, cost and latency metadata, without AI prompts or replies. Browser product analytics, click and scroll heatmaps, performance and error reports follow the visitor-memory choice and browser opt-out signals above. Masked recordings are sampled only after Agree and recording permission; surveys require their own opt-in. Form entries, messages, code and uploaded media are excluded from automatic collection. URLs have query strings, fragments and object identifiers removed. Browser identity is reset on sign-out or consent withdrawal.
• Support data: messages you send to us and information needed to resolve requests.

3. How we use personal information

• Create and secure accounts, authenticate users, and prevent abuse.
• Create, configure, embed, and operate your customer-facing AI agents.
• Process subscriptions, trials, usage credits, taxes, invoices, and billing support.
• Route prompts, voice, files, and conversations to AI or speech providers when a feature requires it.
• Provide analytics, lead capture, notifications, support, debugging, and product reliability.
• Comply with legal obligations and enforce our Terms.

4. Legal bases for Europe and similar regimes

• Contract: to provide the service you requested, including account, agent, billing, and support features.
• Legitimate interests: to secure the platform, prevent abuse, understand reliability, improve features, and communicate service updates.
• Consent: where you opt into optional features, marketing, cookies, or processing that requires consent.
• Legal obligation: where we must keep tax, billing, security, compliance, or dispute records.

5. Korea-specific privacy disclosures

For Korean users, this policy is intended to function as a personal information processing policy. It identifies the purposes of processing, categories of personal information, retention approach, destruction approach, user rights, and contact point for privacy requests. The processors we use, what each one receives, and the countries where they process data are listed at makeagent.fast/security.

When information is no longer needed, we delete it from active systems or de-identify it unless retention is required for billing, tax, dispute, security, or legal reasons. Backups and logs expire on their normal security schedule.

6. Sharing and service providers

We do not sell personal information. Measuring our own ads with the Meta Pixel and Conversions API may count as sharing for cross-context behavioral advertising under some US state laws; you can opt out at any time by choosing Disagree on this page or by sending a Global Privacy Control signal. Otherwise, we share information with service providers only as needed to operate the product, including hosting, database, storage, payment, email, analytics, AI model, speech, authentication, messaging, and support providers.

If you connect third-party channels or enable the website embed, information may also be sent to the provider or visitor endpoint needed for that feature.

7. AI assistant connections

You can connect Make Agent Fast to an AI assistant such as Claude or ChatGPT through a Model Context Protocol (MCP) connection. On our consent page you choose the company and approve the listed permissions; the assistant then receives a time-limited access credential. Access credentials expire after one hour and renewal credentials after 90 days, and you can revoke a connection at any time in Developer settings.

With your request, the assistant can receive:

• Agent details: names, whether the website widget is on, connected channels, and the website install code.
• Reports: conversation and lead counts, the questions customers asked, and which went unanswered.
• Conversations: customer messages and agent replies, with the customer's name or channel label when available.
• Leads: the name, email, and message a customer left, and whether the lead is qualified.

8. Assistant actions and what we receive

When you ask the assistant to act, it can create a draft agent from a website you name, add knowledge, save answers, reply to a customer, update a lead, or turn the website widget on or off. These actions use the same permissions and credit metering as the dashboard.

For each request we receive only the tool name, the inputs the assistant sends for it, and the identity of the connected client. We do not receive your other conversations with the assistant, its memory, or files you share with it. Information the assistant receives from us is then handled by that assistant's provider under its own terms and privacy policy, for example Anthropic for Claude or OpenAI for ChatGPT. Connect only assistants you trust, and share customer data with them only where you have a lawful basis to do so.

We record each connection (client name, company, permissions, and dates) and keep request logs for security and support. We also count which assistant a sign-up or connection came from to understand how people find the service; we do not use this for advertising.

9. International transfers

Make Agent Fast serves users globally, and providers may process information in Korea, the United States, Europe, or other countries. Where required, we use contractual, technical, and organizational safeguards for cross-border processing and limit transfers to what is needed for the service.

10. Retention

• Account records are kept while your account is active and for a limited period afterward for security, billing, legal, or dispute needs.
• Agent, knowledge, conversation, and lead data are kept until you delete them, delete the workspace, delete the account, or a shorter product retention rule applies.
• Billing and tax records may be kept for the period required by law.
• Security logs and rate-limit records are kept only as long as reasonably needed to detect abuse, investigate incidents, and protect the platform.

11. Your rights

Depending on where you live, you may request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or information about how your data is used and shared. California residents may also request to know, delete, correct, opt out of sale or sharing, limit use of sensitive personal information where applicable, and avoid discrimination for exercising rights.

We may need to verify your identity before completing a request. Some data may be retained where required for security, legal compliance, billing, disputes, or service integrity.

12. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, password hashing, session protections, rate limits, logging, and provider controls. No internet service can guarantee absolute security.

13. Children

The service is not directed to children. We do not knowingly collect personal information from children under 13, or under the age requiring parental consent in your jurisdiction.

14. Changes

We may update this Privacy Policy as the service, providers, or laws change. Material updates will be posted on this page and, where appropriate, notified in the product or by email.