The short version
- The assistant works as you, with your Agility permissions. It can't do anything in Agility that you couldn't do yourself.
- We don't keep your content, your prompts or your files. They pass through the server on their way to and from your Agility instance.
- We keep operational records: which tool ran, how long it took and whether it worked. They don't include content, names, email addresses or sign-in tokens.
- We don't train AI models on your data, and we don't sell it.
What the server does
When you ask your assistant to do something in Agility, it calls one of the server's tools, such as "list content items" or "save a page". The server passes that call to the Agility Management API with your sign-in, then hands the answer back to the assistant.
The tools can read and change content items, pages and their Components, content and page models, containers, media and sitemaps, and they can publish, unpublish and delete. Agility checks your permissions on every call, so the assistant can only do what your account is allowed to do in that instance.
Signing in
You sign in with your Agility account on Agility's own sign-in service (mgmt.aglty.io). Agility issues the access token to the AI app you're connecting, not to us, and the app sends it with each request.
The server checks each token with Agility and doesn't store it. So that it doesn't have to ask Agility on every call, it remembers the answer in memory for up to 60 seconds, filed under a one-way hash of the token rather than the token itself.
One exception: media uploads. Uploading a file takes two steps. The assistant asks for an upload link, then sends the file to it. For those few minutes we hold your token in private storage, encrypted with a key that exists only in the upload link. It's deleted when the upload finishes or the link expires after 5 minutes, and a cleanup job removes anything left over within 30 minutes.
What we don't keep
The server has no database of your content. Content items, pages, models and media pass through it while a request runs and aren't saved. Files you upload go straight on to your instance's media library.
We never see your conversation. The server receives only the tool calls the assistant makes, with the details it fills in. Those can include content you asked it to write, which passes through to Agility like everything else.
What we record
To keep the service running and fix problems, we record operational details in Microsoft Azure Application Insights, in the US East region. For each tool call and each call to the Agility Management API, that means:
- which tool or API method ran, how long it took and whether it worked
- when it failed, the type of error and the error message Agility returned (for example, "Request failed with status code 404")
- the instance's ID, your Agility user ID number and the locale
- sizes and counts, such as how many items were saved
It doesn't include content, field values, page or model definitions, files, prompts, names, email addresses or sign-in tokens.
Most of these records are deleted after 90 days. Records of tool calls, errors and server log messages are kept for up to 365 days, then deleted.
Our hosting provider, Vercel, also keeps short-lived request logs (addresses, response codes and timing) as part of running the service.
Your AI platform
Your prompts and the assistant's replies are handled by the AI platform you use: Microsoft for Copilot, OpenAI for ChatGPT and Anthropic for Claude. Their own terms and privacy policies cover that. Anything the server returns to the assistant, such as content it read for you, becomes part of that conversation.
Who else handles your data
- Vercel hosts the server, in the US East region, and stores the encrypted upload hand-off described above.
- Microsoft Azure runs the Agility Management API in your instance's region, and runs Application Insights in the US East region.
AI training and selling data
We don't use your data to train AI models, and we don't sell it or share it for advertising.
Disconnecting
- Disconnect or remove the connector in your AI app, and it stops sending requests to us.
- An instance administrator can change or remove your access in Agility at any time. It applies from the next call.
Questions
Email support@agilitycms.com. A real person will answer.