AGENTLINK PRIVACY POLICY
Last Updated: February 2026
This Privacy Policy ("Policy") describes how Tublian LLC ("Company," "we," "us," "our") collects, uses, discloses, and protects information when you use agentlink.finance and any related pages (the "Website") and any software, products, and services we provide (the "Services," and together with the Website, the "Application").
For purposes of this Policy, "you" and "your" means the person using the Application and, if applicable, the business or entity on whose behalf the Application is used.
This Policy applies to information we collect through the Application (including via email and other electronic messages) and otherwise in connection with providing the Services. This Policy does not apply to information collected by third parties through their own products or services (including third-party services you connect to the Application).
By using the Application, you consent to this Policy.
Eligibility and U.S.-Only Use
The Application is intended only for individuals who are at least 18 years old and located in the United States. The Services are operated from the United States.
Table of Contents
1. Information We Collect
A. Information You Provide
We may collect information you provide directly, including:
- Account and profile information: name, email address, company/business name, and other basic account details.
- Support communications: messages you send to us (including support requests).
- Content you submit: files, documents, and messages you upload or send through the Application.
B. Customer Financial and Business Data You Connect or Route to Us
If you connect third-party services (such as bookkeeping, banking, CRM, or email) or route documents to the Services, we may collect and process:
- Financial records (e.g., transactions, invoices, bills, receipts, and related metadata).
- CRM data (e.g., contacts, deals, pipeline details).
- Chat content (e.g., Ask Finance conversations), if you use those features.
- Activity logs, including Partner access activity if you enable delegated access.
Sensitive details may appear in documents. While we do not request bank login credentials and use OAuth-based access where available, invoices and other documents can contain sensitive identifiers (for example, EINs, partial account numbers, addresses). If such details appear in documents you route to the Services, we may process them to provide the Services.
C. Email Content and Attachments
If you forward emails to AgentLink or direct others (including vendors) to email documents to an AgentLink-provided address, we may store and process:
- email headers (e.g., from/to, subject, date),
- email body content, and
- attachments.
We may extract structured data from emails and attachments to identify invoices, bills, receipts, amounts, dates, vendors, and similar fields.
You are responsible for ensuring you have the rights and permissions to forward or route these emails and attachments to AgentLink.
D. Gmail Permissions and AgentLink Inbox Setup (Google Workspace / Gmail)
If you choose to use the AgentLink Inbox feature and connect your Gmail account, you authorize AgentLink to access limited Gmail settings on your behalf in order to configure email routing into AgentLink.
What Gmail permission we request
We may request the Gmail restricted scope gmail.settings.basic (or an equivalent Gmail settings permission) solely to set up and manage forwarding and filtering rules required for the AgentLink Inbox feature.
What we do with Gmail settings
Using this permission, AgentLink may:
- create, update, or remove Gmail forwarding addresses needed to route messages to your AgentLink Inbox address; and
- create, update, or remove Gmail filters/rules (for example, filters that apply to messages containing invoices, bills, receipts, or vendor emails) to automate forwarding to AgentLink.
What we do not do
- We do not read your email content using the Gmail settings permission (gmail.settings.basic).
- We do not use this permission to access your inbox messages, open emails, or read message bodies.
Note: If you separately choose to forward emails or have vendors send emails to an AgentLink-provided address, AgentLink will process only those emails that are routed to AgentLink. This is separate from the Gmail settings permission described above.
How users can revoke access
You can revoke AgentLink's access at any time by removing AgentLink from your Google Account's connected apps / third-party access list. Once access is revoked, AgentLink can no longer manage Gmail forwarding addresses or filters on your behalf, and the AgentLink Inbox setup may stop working.
How users can request data deletion
You can request deletion by deleting your AgentLink account (see "How Long We Keep Information"), or by emailing hello+privacy@tublian.com from the account owner's email address.
E. Information We Collect Automatically (Telemetry)
We collect certain information automatically to operate, secure, and improve the Application, including:
- IP address
- browser and device information (such as user-agent, operating system, and device identifiers)
- usage data (such as pages/screens viewed, features used, timestamps, and interaction events)
- approximate location derived from IP (e.g., city/state)
- crash and performance diagnostics
- cookies and similar technologies (including local storage) to support session management and product functionality
We do not use Customer Data for marketing campaigns or targeted advertising.
2. How We Collect Information
We collect information:
- Directly from you when you create an account, contact support, or submit information.
- Automatically via cookies and similar technologies as you use the Application.
- From third-party services you connect (when you authorize access).
- Through email ingestion when emails and attachments are routed to AgentLink-provided addresses.
- Through Gmail settings access when you enable AgentLink Inbox and authorize us to manage forwarding and filtering rules.
3. How We Use Information
We use information to:
- Provide, operate, maintain, and support the Application.
- Process and organize Customer Data, including classifying documents and extracting fields.
- Generate product outputs such as claims, labels, summaries, recommendations, and confidence indicators.
- Provide Partner delegated access features if you enable them, including maintaining a client-visible activity log.
- Configure and manage AgentLink Inbox routing (forwarding addresses and filters) when you authorize Gmail settings access.
- Secure the Application, prevent fraud and abuse, and troubleshoot issues.
- Improve performance and reliability through product usage metrics (e.g., feature usage, latency, error rates).
- Comply with legal obligations and enforce our agreements.
4. AI Processing and Third-Party AI Processors
Some features may use machine learning or AI systems to produce derived outputs (for example, labels, summaries, or classifications).
A. What We Send to AI Systems
We design AI processing so that third-party AI processors receive only derived summaries/labels, not raw emails, raw attachments, or direct user identity.
B. Third-Party AI Processors; No Training; No Retention for Learning
We may use third-party AI processors (for example, AWS Bedrock) to support certain AI functions. We do not allow those processors to train on Customer Data we send for processing, and we use configurations intended to prevent retention of Customer Data by the AI processor for learning.
5. Disclosure of Information
We may disclose information:
- To service providers that help us operate the Application (e.g., hosting, infrastructure, security, customer support tools), subject to appropriate confidentiality obligations.
- To Partners you authorize through delegated access, limited to what you permit within the product.
- For legal reasons, such as responding to lawful requests, enforcing agreements, protecting rights/safety, or investigating suspected fraud or abuse.
- In connection with corporate transactions, such as a merger, acquisition, or sale of assets, where permitted by law.
We may also disclose aggregated and de-identified information that does not identify you or your business, such as high-level product usage metrics.
We do not sell your personal information to third parties.
6. Your Choices
You can:
- Control which third-party services you connect and disconnect them.
- Delete conversations and certain records from within the Application where the feature is available.
- Revoke Gmail settings access by removing AgentLink from your Google Account's connected apps / third-party access list.
- Request account deletion (see "How Long We Keep Information").
You can also manage cookies through your browser settings, but some features may not work properly if cookies are disabled.
7. Data Security
We use industry-standard administrative, technical, and physical safeguards designed to protect information. No system can be guaranteed to be completely secure, and you are responsible for maintaining the confidentiality of your account credentials.
We store OAuth tokens (including access and refresh tokens) in order to maintain authorized connections to third-party services you choose to connect. We protect those tokens using appropriate security measures.
8. How Long We Keep Information
We retain information for as long as necessary to provide the Services and operate the Application.
A. Email and Attachment Retention (TTL)
We may retain raw emails and attachments for up to 90 days while an account remains active, to support processing, traceability, and user workflows.
B. Deletion
- Single-item deletion (documents/chats): when you delete eligible items in the Application, we delete them promptly from active systems.
- Account deletion: if you delete your account, we delete Customer Data from active systems promptly, consistent with our deletion process.
If you revoke Google access or delete your AgentLink account, AgentLink will no longer be able to manage Gmail forwarding addresses or filters on your behalf, and the AgentLink Inbox setup will stop functioning. You can also remove or modify any forwarding rules and filters directly in your Gmail settings.
C. Backups
We design our systems so that we do not maintain customer-identifiable backups intended for retrieval of specific customer content. Some encrypted infrastructure-level copies may exist briefly as part of standard reliability operations, but we do not use them to restore or access specific customer content as a routine product function.
9. Access and Requests
Requests about your information (including access or deletion requests) may be submitted by the account holder by emailing: hello+privacy@tublian.com
We may request verification before fulfilling requests.
10. State-Specific Rights
Depending on your state of residence, you may have additional privacy rights. Account holders may submit requests via hello+privacy@tublian.com. We will not discriminate against you for exercising applicable rights.
11. Changes to This Policy
We may update this Policy from time to time. The "Last Updated" date reflects the effective date. If we make material changes, we will post an updated Policy on the Website.
12. Children Under the Age of 18
The Application is not intended for children under 18, and we do not knowingly collect personal information from children under 18.
13. Contact Us
© 2026 Tublian LLC. All rights reserved.