Privacy notice

• Controller: for information about you as our customer or visitor (your account, billing, the AI diagnosis, emails you send us and site data), we decide how it is used, and this notice applies directly.
• Processor (service provider): for the business data we read from the tools your business connects (such as calendar events, contacts, invoices and CRM records) and from the email it forwards to its own Carragent addresses (messages from its customers and suppliers, and supplier invoices), we act on your business’s behalf and follow its instructions and settings. That business decides why the data is used, and its own privacy notice applies to its customers.
• The business is the sender of the messages its agents send, and it is responsible for its own contacts: whom it writes to, on what legal basis and what it tells them. We provide the tool.
• If you are a customer of a business that uses Carragent and want to exercise your rights, contact that business first. We help it answer you. To stop the emails of a business, see “Emails from a business that uses Carragent” below.

• Account: your name, email, business name, role, language and time zone, and the settings you choose (agents, rules, the facts you write for the Front desk, and sender details such as your business’s display name, legal name and mailing address).
• Billing: your plan, subscription status and invoices, and the billing details needed for invoices and tax. Card payments happen on Stripe’s pages: we never see or store your full card number.
• AI diagnosis: your answers about your organization (type, country, team size, tools, the challenges you pick, the workflow you describe, hours per week, urgency and an optional budget range), plus your name, email, company and, if you give it, your website.
• Connected-tool data, only from the tools your business connects and only what the features it turned on read: calendar events (title, description, time, place, attendees and their answers), contacts (name, email, phone, language), invoices, payments and quotes (amounts, due dates, status), CRM records (contacts, deals, quotes and logged activity: only the time, direction and outcome of emails, meetings and phone logs, never their subject or text) and the rows of the Google Sheets files Carragent created for you or that you open with it (such as the supplier-invoices, stock and leads sheets).
• Forwarded email: for the Front desk and Supplier invoices agents, the messages your business forwards to its own Carragent addresses: the sender’s address and name (when it is a plain name), the subject, the text of the message (quoted replies and signatures cut), the list of attachments (names, types and sizes, never the files) and a one-line summary the AI writes for the business. Messages the agents leave alone, such as automatic replies or mail from your own team, are stored too, so you can see what happened to them.
• Supplier invoices: for each PDF forwarded to the Supplier invoices address, the fields the AI reads from it (supplier, invoice number, dates, amount and currency), the address it came from and what became of it (logged, duplicate, to check, paid). The PDF itself is read once and never stored.
• Messages: the emails the agents send (recipient, content, time, delivery status), the replies they receive, unsubscribes, and the approvals and rules behind each one.
• Emails you send us, and our replies.
• Technical data: IP address and browser details, to keep the service secure and fix errors. For rate limits and diagnosis records we store a one-way hash of the IP address, not the address itself.

• To run your account and the features your business turns on: syncing your tools, reading the email it forwards, preparing and sending the messages you approve or your rules allow, logging supplier invoices and watching stock, and writing your weekly report.
• To bill you and keep the records that tax law requires.
• To write your AI diagnosis and send it to you.
• To send service emails: sign-in links, approvals waiting, alerts, receipts and important changes.
• To keep the service secure, prevent abuse and fix problems.

We do not sell personal information and do not use it for advertising. Our marketing emails go only to people who agreed to receive them or started the conversation, and each one lets you unsubscribe (CASL).

• We use Anthropic’s Claude API to write the diagnosis and, for the agents your business turns on, to read what a task needs and draft a message or report: the text of a forwarded message (to sort it, and to draft an answer you approve), a forwarded supplier invoice (a PDF, read as a document to pick out its fields), details from your tools such as dates, amounts and first names, and the facts your business wrote for its front desk.
• Emails you send to our support address may be sorted the same way, by our own front desk: a routine question can get a fixed answer built from our help facts at once; anything else waits for a person, and anything about money, legal matters, security or something not working is always answered by a person. As with your customers’ mail, we mask addresses and phone numbers before the model reads it.
• Anthropic is our sub-processor for this AI processing. It receives only what a task needs: we mask email addresses and phone numbers in forwarded messages and do not tell the model who wrote them. A PDF invoice goes as it is, so it can carry whatever is printed on it.
• For the diagnosis, we do not send your name, email or website to the model.
• Under Anthropic’s commercial terms, API inputs and outputs are not used to train its models and are kept only for a limited time. We do not use your data to train AI models either.
• The AI does not decide anything about anyone on its own: your business approves messages or sets the rules that send them, and can change them at any time. An answer the Front desk sends on its own (only if your business turned that on) is fixed wording built from the facts your business wrote, not text written by the AI.

Carragent’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can read that policy at https://developers.google.com/terms/api-services-user-data-policy.

In plain words, the same applies to the data we receive from Google, Microsoft, HubSpot and your own Stripe account:

• We use it only to provide the features your business turned on, such as confirming an appointment or following up on a quote, and to keep the service secure.
• We never sell it, never use it for advertising and never use it to train AI models.
• We pass it on only as those features need (for example to Anthropic to draft a message or read an invoice, or to Supabase to store it), for security, or when the law requires it.
• People at Carragent do not read it, unless you ask us to (for example for support), it is needed to investigate security or abuse, or the law requires it.
• What we access: the account you connect (its email address or ID); events on your primary Google Calendar; Google Sheets, only as described next; Microsoft 365 calendar events; HubSpot contacts, deals and quotes and, of the activity it logs (emails, meetings and phone logs), only the time, direction and outcome, never the subject or text; your Stripe account’s customers, invoices, payments and quotes, read only (if you connect Stripe with a restricted key that you create yourself, only invoices, customers and the payments recorded against invoices). We do not read your inbox.
• Google Sheets uses the drive.file permission only: Carragent can see only the spreadsheets it creates in your Drive for you (the supplier-invoices, stock and leads sheets) or that you open with it, never the rest of your Drive. It adds a row to the supplier-invoices sheet for each invoice, and reads back that sheet’s status, due date and amount columns before a reminder, so a correction you make there wins.
• Changes: today the agents change something in a connected tool in one case only, the rows they add to the supplier-invoices sheet Carragent created for you. They do not create, move or delete calendar events, do not edit your CRM or Stripe and do not send from your Microsoft 365 mailbox: the agents’ emails go out through our email service (Resend), in your business’s name. Some permissions you grant are wider than that, because they also allow changes (the Google and Microsoft calendar permissions, and HubSpot’s for contacts and deals). If an agent ever uses one, we say so here first, and it will wait for your approval or follow your rules.
• Disconnect a tool from Connections in your dashboard and we delete its tokens and the data we synced from it. You can also remove access in your Google, Microsoft, HubSpot or Stripe account settings.

The Front desk and Supplier invoices agents work from email that your business forwards to its own addresses at Carragent (reception+… and payables+… on our reply domain). We never ask to read your inbox: we receive only what is sent to those addresses, which is what you forward and whatever anyone who has an address writes to it.

• What we receive: each message as forwarded, with its text, the sender’s address and name, the subject and the names, types and sizes of its attachments. The PDFs of supplier invoices are fetched from our email provider, read once in memory and never stored; other attachments are not opened.
• Who reads it: our code first, which drops automatic replies, newsletters, no-reply senders, our own mail and mail from your own team. Then an AI model (Claude, by Anthropic) reads the text to sort it: a question the facts you wrote can answer, a booking, a problem, or something for you. For an invoice, the model reads the PDF and returns the supplier, number, dates and amount, which our code checks. People at Carragent do not read your mail unless you ask us to, it is needed to investigate abuse or the law requires it.
• What happens next: a routine question gets an answer built from the facts you wrote, which waits for your approval unless you turned on automatic answers; anything else is passed to you by email and on your dashboard. A supplier invoice is logged, added to your invoices sheet and checked for duplicates, and you are reminded three days before it is due. The Supplier invoices agent writes to nobody but you.
• What we keep: for 90 days, the text, subject, sender’s name, our short summary and the attachment list of each message; after that they are deleted, and 13 months after it arrived, so is the record of what the agent did with it (sender’s address, date, result). The fields read from an invoice stay in your invoice log until your plan ends and the deletion described under “How long we keep it”, and in your sheet, which is yours.
• Your control: stop forwarding at any time at your mail provider. To have a message, or all the messages of one person, deleted sooner, write to admin@carragent.com.

The access tokens for your connected tools (and a Stripe restricted key, if you paste one) are encrypted at rest in Supabase Vault and never sent to your browser. Data travels over HTTPS, the database enforces row-level rules so each business sees only its own data, keys stay on our servers, and sign-in uses one-time links or codes. We ask each provider for the access our features need, and the section on Google, Microsoft and HubSpot says where a permission is wider than what the agents do today. No method is perfect: if a breach creates a real risk of significant harm, we notify you and the authorities as the law requires.

These service providers process personal information for us, under terms that protect it:

• Supabase: database (including the email your business forwards and the invoices the agents log), sign-in, file storage and encrypted token storage (Vault). Region: us-west-2 (Oregon).
• Vercel: hosts the website and the dashboard and runs our server code; also cookieless, aggregate site statistics.
• Resend: sends our emails and the emails the agents send, and receives the email your business forwards to its Carragent addresses and the replies to the agents’ emails.
• Anthropic: AI models (Claude API), our sub-processor for the AI processing: the diagnosis and the agents (forwarded messages with contacts masked, PDF invoices, and the details a task needs).
• Stripe: subscriptions, payments and invoices.
• Cloudflare: checks that forms are sent by a person (Turnstile), when that check is on.

The tools your business connects (Google, Microsoft, HubSpot and your own Stripe account) are chosen by your business. We exchange data with them on its instructions, under their own terms. We update this list before a new provider starts processing personal information.

Most of these providers store or process data outside Canada, mainly in the United States, where local authorities may be able to access it under their laws. We rely on the providers’ data protection terms, including standard contractual clauses where they apply. If that is a concern for some information, do not send it to us and write to admin@carragent.com.

• Connected-tool data, forwarded email, logged invoices, the agents and their history: while your plan is active, except where the next lines are shorter. When it ends, we keep them 30 days, then delete them. We email you at least a week before.
• Forwarded email (Front desk and Supplier invoices): the text, subject, sender’s name, our short summary and the attachment list for 90 days; the record of what the agent did with each message (sender’s address, date, result) for 13 months.
• The emails the agents send and the replies they receive: the text and subject for 180 days; the record (recipient, time, status) for 24 months, so the unsubscribe link in each customer email keeps working.
• PDF invoices: not kept. The AI reads each one once, and we keep only the fields it read, in your invoice log.
• Addresses that asked not to be contacted: the address and the date, kept after your plan ends too, so the request still stands if your business comes back.
• Your account (sign-in, name, business name and role): until you ask us to close it, so you can come back.
• Data from a tool you disconnect: deleted when you disconnect it.
• Billing records: as long as tax law requires (in Canada, generally six years).
• AI diagnosis: while it is useful to you (its link reopens your report). We delete it when you ask.
• Security logs and technical records: a short time, then deleted.
• Deleted data can stay in encrypted backups for a short time until they rotate.

These emails are sent by the business itself, through Carragent: the business, not Carragent, decides whom to write to and is the sender. Every one carries the business’s name and mailing address. Emails to customers also carry a one-click unsubscribe link in their headers and end with a line saying to reply STOP; a purchase order to a supplier has neither, but a reply of STOP to it is honoured too.

• To stop them, reply STOP (or “unsubscribe”) to the email, or use your mail app’s unsubscribe button (a one-click link in the email’s headers). It stops every agent of that business from writing to your address, it works at once and it needs no account or sign-in.
• A clear request to stop, written to the business’s own info@ address from a sender we can verify, is read as an opt-out too. If you tell the business in another way, or we could not verify the sender, it asks us to add your address to its list.
• If an email to you bounces for good, or you report it as spam, your address goes on the same list.
• What we keep is your address and the date, only so the request keeps working, even after the business closes its account.
• To see, correct or delete what a business holds about you, write to that business first; we help it answer you (see “Your rights”).

Write to admin@carragent.com to ask what personal information we hold about you, to get a copy, to correct it, to have it deleted or to withdraw your consent where the law allows. We answer within 30 days.

In Quebec, Law 25 also gives you the right to data portability and to be told when a decision is based only on automated processing. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, to the Commission d’accès à l’information.

In Latin America, the European Union or the United Kingdom, your local law may give you similar rights (access, correction, deletion, objection and portability). Write to us and we answer under the law that applies to you; you can also contact your local data protection authority. Where the GDPR applies, we rely on our contract with you, our legitimate interest in running and securing the service, our legal obligations, and your consent for marketing emails.

We use only the cookies the site needs:

• sign-in cookies that keep you signed in to the dashboard;
• a short-lived security cookie while you connect a tool;
• NEXT_LOCALE: your language, for one year;
• carragent_theme: the light or dark theme you pick, for one year.

No advertising or cross-site tracking cookies. Site statistics (Vercel Web Analytics) are collected without cookies and only in aggregate.

Carragent is for businesses, not children. We do not knowingly collect information about children, and we do not ask for health information or government IDs. Your connected tools and forwarded mail may hold sensitive details (for example, appointment titles at a clinic, or what a customer writes to your front desk): we process them only to provide your features, so keep titles and notes to what a reminder needs, and do not forward mail you would not want an AI model to read.

We may update this notice. The date at the top shows the current version, and for important changes we email account owners before they apply. The English text is the controlling version; Spanish and French are provided for convenience.