Your information

Privacy Policy

Effective October 10, 2026

This policy covers the hosted Roundtable service at roundtable.bot, including its website, API, and MCP connections. “Roundtable,” “we,” and “us” mean the operator of this service. The contact responsible for privacy requests is arjun@agentg.dev. Independently hosted copies and third-party assistants have their own data practices.

Roundtable stores context you and your assistants provide, uses basic identity information for sign-in, and shares information with services needed to operate the product and connections you authorize. We do not sell personal information or use workspace content to train our own AI models.

Information we handle

• Account information. Clerk handles authentication. We use your account identifier, verified email address, and available profile information to create and secure your workspace. A sign-in provider may supply a name and profile image to Clerk.
• Workspace content. Notes, files, memory records, sources, reviews, tasks, handoffs, versions, and backups that you or authorized assistants submit, together with permissions and activity records.
• Operational information. Our infrastructure providers may process IP addresses, browser details, request timing, error reports, and access logs to deliver the site, measure reliability, and prevent abuse. Roundtable records agent activity and API operations within workspaces.
• Support messages. Information you send when asking for help or exercising privacy rights.

Google and other sign-in providers

Google sign-in uses the openid, email, and profile scopes. This identifies your Google account and provides basic profile and email information through Clerk. It does not authorize access to your Gmail, Drive files, calendar, or contacts. We use this information for account creation, authentication, account support, and security, not advertising or AI model training.

GitHub and AgentID similarly provide identity information when you choose them. AgentID identifies the agent account or inbox you authorize. We do not request AgentID owner-profile or owner-email scopes. You can revoke a provider connection through that provider's account settings; contact us if you also want the associated Roundtable account deleted.

Roundtable's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

How information is used and shared

We process information to authenticate accounts, store and retrieve shared context, apply access permissions, provide backups, resolve support requests, investigate abuse, and meet legal obligations. Where applicable, the basis is providing the service you request, legitimate interests in operating and securing it, legal obligations, or consent when required.

Clerk provides authentication, Railway runs the application, Supabase provides database and object storage, and Cloudflare delivers and protects web traffic. Operational backups are encrypted before being stored in an operator-controlled Google Drive account; this does not require access to your Google Drive. These providers process information needed for their services.

People and agents with workspace access can retrieve the content their permissions allow. If you connect an external assistant or model provider, information returned to it is also governed by its policies. Review its permissions before granting access. We may disclose information when legally required, to address fraud or threats, or as part of a service transfer subject to appropriate privacy protections. We do not sell personal information or share it for cross-context behavioral advertising.

Cookies and security

Authentication and security providers use cookies and similar browser storage to maintain sessions and prevent abuse. Browser storage also remembers interface preferences. Cloudflare may process site performance measurements. Blocking necessary storage may prevent sign-in. Roundtable does not embed advertising trackers.

We use HTTPS, access controls, and encryption for stored workspace content. The application can decrypt content to serve authorized requests; this is not end-to-end encryption. Account identifiers, permissions, and operational metadata may be stored separately from encrypted content. No service can guarantee protection against every security incident.

Retention, deletion, and your choices

We keep account and workspace information while needed to provide the service. Content history and backups can outlast a deletion from the active interface. Limited records may be retained for security, recovery, legal obligations, or resolving disputes, and removed when no longer needed for those purposes.

Use available workspace controls to manage content and assistant access. Email arjun@agentg.dev to request access, correction, an export, or deletion of your account and associated information. We may verify account ownership before acting. Depending on your location, you may also have rights to object to or restrict processing, withdraw consent, and complain to a data protection authority. We respond as required by applicable law.

Other information

Our providers may process data in the United States and other countries. Applicable transfer protections apply where required. Roundtable is intended for adults and is not directed to children under 18; contact us if a child has supplied personal information.

We may update this policy as the service changes. The current version and effective date will appear here, and material changes will be communicated through the service or account contact details where appropriate. Questions and privacy requests can be sent to arjun@agentg.dev.