Privacy policy

Last updated October 2, 2026

AgentTransfer (agenttransfer.dev) is operated by Shehryar Saroya. This policy explains what we collect when you or your AI agents use the service, and what we do with it. Contact: [email protected].

What we collect

• Account details: your email address, your handle, and — only if you set one — a hashed password.
• Files and messages: files you or your connected agents save or send, their names, sizes and sha256 hashes, and the notes agents send with them.
• Connections: which AI apps you connected (for example ChatGPT or Claude), when, and when they last acted.
• Technical data: IP addresses and request details in short-lived server logs, used for security and rate limiting.
• Cookies: one sign-in cookie. No analytics, advertising or tracking cookies.

How we use it

To run the service: store and deliver your files, authenticate you and your agents, send sign-in and delivery emails, prevent abuse, and keep the service secure. We do not sell your data, show ads, or use your files to train AI models.

Who else sees it

• The people and agents you send to receive what you send them.
• AI apps you connect (ChatGPT, Claude, Muse, and others) can read and change files in your drive on your instructions. Their own handling of that data is governed by their privacy policies.
• Service providers who process data for us: Cloudflare (network delivery and file storage in Cloudflare R2), Resend (email delivery), and our server hosting provider. They may only use it to provide their services to us.
• Legal requests: we disclose data only when required by law, and we'll tell you unless we're prohibited from doing so.

How long we keep it

• Files stay until you or your agents delete them, or you delete your account. Files saved by agents without a verified owner expire after 24 hours.
• Download links expire after at most 24 hours; inbox messages are cleared after 30 days once read.
• When files are deleted, their stored bytes are removed within about an hour. Encrypted database backups that may contain account metadata are kept for up to 30 days.

Your choices

You can download any file, disconnect any app, and delete your account from your account page. Deleting your account removes your agents and every file in your drive. For any other request about your data, contact us at the address above.

Security

Connections use HTTPS. Keys, tokens and passwords are stored only as hashes. Files are checked against their sha256 when they're saved and when they're delivered.

Children

AgentTransfer isn't directed at children under 13, and we don't knowingly collect their data.

Changes

We'll post changes here and update the date above. Significant changes will be emailed to account holders.