Security & Data
Your clients trust you with their information. Here is what AgentHub does with it.
Plain answers about what AgentHub reads, who can see it and what stays in your control. This page describes how AgentHub works today. It is not a certification.
What you share
- Your notesWhat you write about each client
- Slack channels you pick PilotNew messages only
- Emails you forwardAnd client replies to your updates. Never your inbox.
Your private workspace
Where AgentHub answers, drafts and keeps the record
- Your team sees it by role
- Your conversations stay yours
- AgentHub drafts, you decide
Your client sees- Updates you publishThrough a link you share
- Approval links you sendOne frozen request, one response
To answer and draft, AgentHub sends the content it needs to OpenAI. AgentHub does not use your workspace content to train AI models. If you connect Claude or Claude Code, it reads only the clients you pick, and the terms and settings of your own account or organization apply, including training.
Boundaries
What AgentHub never does.
- Read your inbox
It sees only the emails you forward from the address you sign in with, and client replies to updates you email.
- Post in a client’s Slack channel
And a Slack message is never treated as approval.
- Send a client update without you choosing to send it
Publishing an update sends nothing. An update email goes out only when you press Send. Account and notification emails to you and your team are automatic.
- Approve for you
An approval link takes one named response from your client, and approval never starts work.
- Run or edit a client’s workflow
It reads what you connect. It does not change your client’s automations.
- Train AI models on your work
AgentHub does not use your workspace content to train AI models. An AI app you connect follows the terms and settings of your own account or organization.
Access
Who can see what.
- Your team
Sees the work by role. Viewers read, operators do the work, admins manage settings and people. Only the owner handles billing and export.
- Your conversations with AgentHub
Only you. Other members and the workspace owner cannot open them. What you share into the work becomes part of the team’s record.
- Your notes
Yours. Your team sees the items you put in a draft, not your notes.
- Your clients
No account needed. They see only the links you give them.
- AgentHub staff
See account details and connection health, not client messages. They open workspace content only when you ask for help, to protect the service, or when the law requires it.
Client links
The links your clients open, built with care.
Scope approval links
Your client reviews the exact change and answers once, without an account.
- The scope is frozen, and the link lasts 14 days
- One named response, kept with the change
- Only a security hash of the link is kept
- Asks search engines to leave it out of results
- A recorded approval, not an electronic signature
Good to know: anyone holding the link can view the request and respond, and the name your client enters is not a verified identity.
Published update links
You decide when an update is published and who gets the link.
- Publishing sends nothing by itself
- Revoking a link ends it for good
- Update emails are plain text, with no open or click tracking
Good to know: anyone holding the link can open the update, so share it only with the people it is for.
Your control
Your record stays yours.
- Export your record
Only the owner can export the workspace, at any time, even when it is read-only. Each member can export their own private conversations.
- When a plan ends
The workspace becomes read-only. Your records stay accessible, and the owner can still export the workspace.
- Disconnect a tool
Disconnect Slack and the copies AgentHub made only to run it are deleted within 10 days; work you saved stays. Disconnect n8n, Make, Zapier or HubSpot and AgentHub deletes its copy of the key; cancel the key in that tool too. Disconnect Claude or Claude Code in AgentHub, under Settings, AI apps, and AgentHub refuses that connection’s next read; a read already underway can finish. Claude Code can also read through your Claude connection, so if you use both, disconnect both. AgentHub cannot recall text the app already read.
- Remove a member
Their access ends at once.
- Close the workspace
Access ends at once. Content is deleted after billing has stopped, usually within minutes.
Who processes your data
The database is hosted in the United States. These providers help run AgentHub, and the list is updated before a new provider receives workspace content.
- Supabase
- Vercel
- OpenAI
- Stripe
- Resend
- Pipedream
- Cloudflare
- Lovable
- xAI
What each one does is in the Privacy policy. Stripe handles payments; AgentHub does not store full card details.
This page is not a certification
AgentHub does not claim SOC 2, ISO or other compliance, and this page is not a data-processing agreement. It describes how AgentHub works today and changes as the product does.
To report a concern, email info@agenthub.ai.
Privacy policy updated November 2, 2026Details
The details, in plain words.
What can a connected AI app read?
Owners and admins can connect Claude or Claude Code. Operators can connect if the workspace owner allows it. Viewers cannot connect. Each person picks the clients the app can read. AgentHub’s connector can read those client records; it has no tools to approve, check, publish or send. A limited filter cleans the text first, and it can miss sensitive details. The terms and settings of your own account or organization apply to what the app reads. To end access, disconnect each connection in AgentHub; removing AgentHub inside Claude does not end it. AgentHub cannot recall text the app already read. The privacy notice lists what an app can read and what stays in AgentHub.
What happens to an email I forward?
Each workspace has a private forwarding address. A forward becomes a draft only when it comes from the address a member signs in with; anything else is dropped. AgentHub keeps the text (up to 12,000 characters), the subject, the original sender, who forwarded it and the result of a sender check. A client’s reply to an update you emailed is kept the same way, as a draft. AgentHub does not connect to your mailbox.
What does AgentHub keep from Slack?
Slack is open to workspaces in a pilot, by invitation. There are two parts. In the channels a member picks and links to a client, AgentHub reads only new messages, and text that is not a likely request is deleted after sorting. Separately, if you link your Slack account, AgentHub keeps your private messages with the AgentHub app. It never reads private messages between people or old channel history.
What is sent to OpenAI?
The content needed to answer your question or prepare a draft. AgentHub does not use your workspace content to train AI models.
What about n8n, Make, Zapier and HubSpot?
AgentHub keeps the structure of the workflows you assign, such as names, status and steps, and reads HubSpot details without changing them. It does not read or keep code. Reading n8n setup details is optional and off by default.
How do private file links work?
A link covers one version of a file, and anyone holding the link can open that version. AgentHub keeps only a fingerprint of the link. It ends when you revoke it, delete the conversation or leave the workspace, or when the workspace is closed. It cannot recall copies already downloaded.
How do I report a concern?
Email info@agenthub.ai or use the contact form.
Get started
Start with one client.
14 days free. Up to 3 clients. No card.
Security questions first? Contact us.