Privacy policy
Effective 4 November 2026
Who runs AgentDesk
Kidus Tiliksew runs the AgentDesk service. Send privacy questions and requests to privacy@kidus.sh.
When this policy changes, the new version is published on this page with a new effective date.
What AgentDesk stores
AgentDesk stores this data for your account:
- Your email address, which you give when you sign in.
- The decisions your agents ask: their titles, bodies, and options, and your answers, your notes, and any chat message an agent relays as your answer.
- Your agent sessions: each agent's name, topic, status lines, and links, as the agent reports them.
- Your connections: each connection's name, the harness it belongs to, and the host name of the machine that ran the installer.
- Your devices: each phone's device name, push token, and time zone.
- Your notification rules and settings.
AgentDesk uses this data only to show it to you and to deliver your notifications, apart from the account identifier and email address it shares with PostHog, as Analytics describes below. Connection tokens are stored only as SHA-256 hashes. AgentDesk does not store your IP address.
Push notifications
Push notifications travel through the Expo push service and then Apple Push Notification service to an iPhone or Firebase Cloud Messaging to an Android device. A notification can carry a decision's title and option labels, its topic, an agent's name and status line, and, when a deadline passes, the answer applied by default. A notification never carries a decision's body. The daily digest notification carries only counts.
Service providers
| Provider | What it receives |
|---|---|
| Clerk | Your email address, to sign you in. |
| Convex | Everything AgentDesk stores, listed above. Convex runs AgentDesk's database and backend. |
| Expo, Apple, and Google | The content of each push notification and your device's push token. |
| Cloudflare | Requests from your agents and the installer to the AgentDesk gateway. It reads the IP address of a machine sign-in request to limit how often one can start, and AgentDesk keeps no copy of it. |
| PostHog | App usage, your account identifier and email address, and whether your account has a connected Mac app, as Analytics describes below. |
| Vercel | Requests to this website. |
| GitHub | Downloads of the AgentDesk installer. |
AgentDesk shares your data with no one else. These providers may process data in the United States and in other countries.
Analytics
The app sends usage events to PostHog when it is installed, updated, opened, or moved to the background, and when you open a screen. A screen is named by its route pattern, such as /agent/[id], never by the id itself. Once you sign in, the app identifies you to PostHog by your Clerk user ID, which is your account identifier, with your email address, and attaches its usage events to them. Events the app sends before you sign in carry neither. PostHog derives no location from these events. The app records no touches, screen content, session recordings, or surveys.
The AgentDesk backend tells PostHog whether your account has a connected Mac app. The Mac app itself sends no analytics.
The app has no setting to turn analytics off. To object or to ask for removal, email privacy@kidus.sh.
This website sets no cookies and runs no analytics.
AgentDesk does not sell your data, does not use it for advertising, and does not track you across other companies' apps or websites.
How long AgentDesk keeps it
- An agent session ends after 24 hours without activity. The session and its status history are deleted 7 days after it ends.
- A machine sign-in request, with the machine's host name, is deleted 24 hours after it starts.
- AgentDesk keeps a copy of each push notification it sends. Once sending has finished and more than 24 hours have passed since the notification was queued, an hourly cleanup deletes the copy. The cleanup deletes copies in whole batches, so a copy can stay longer, with no fixed limit, while its batch holds a newer, unsent, or unrecognized notification, or while the device's history holds more than 4,000 notifications.
- A device and its push token are deleted when you sign out on that device.
- Decisions, rules, settings, and connections, including revoked connections, are kept until you delete them or your account.
- After your account is deleted, AgentDesk keeps only your Clerk user ID, for 30 days, so an old sign-in cannot recreate the account.
- Usage analytics identified to your account stay in PostHog until your account is deleted. Deleting your account asks PostHog to delete the person it holds for your account and that person's events. PostHog removes events in scheduled batches, usually within two weeks. Events sent before sign-in carry no account and are not deleted.
Deleting your data
- To delete your account, open Settings, then Account, and choose Delete Account. Every connection and device is disconnected at once. Your data and your Clerk sign-in account are deleted within 24 hours. Within those 24 hours, AgentDesk also asks PostHog to delete the person it holds for your account and that person's events. PostHog removes the events later, in scheduled batches, usually within two weeks.
- To delete one settled decision, swipe it in History and choose Delete.
- To revoke one connection, swipe it in Settings, then Connections, and choose Revoke.
- To remove AgentDesk from a machine, run
agentdesk uninstall. It revokes the machine's connections and removes the token, the skill, and the hooks from each harness's configuration. - To get a copy of your data or have it deleted, email privacy@kidus.sh.
Children
AgentDesk is not directed at children under 13.
Contact
Questions about this policy or your data go to privacy@kidus.sh.