Security & Privacy

Straightforward answers about how this works and where your data goes.

What we collect

  • TheAgentKit does not collect or store your agent conversation data.
  • API keys are stored locally on your machine and are never sent to us.
  • We retain purchase/access records needed to deliver downloads, resend access, and manage subscriber/Discord access.
  • Purchase data is handled by Stripe. Transactional email is handled by Postmark. Discord setup uses Discord OAuth/roles when you connect it.
  • We do not run our own analytics or tracking on the site beyond standard server logs.

Where your data goes

  • Your agent conversations go directly to the AI provider you choose, such as OpenAI, Anthropic, or Google.
  • We do not proxy your prompts through our servers.
  • Your use of those providers is subject to their own privacy policies and terms.
  • We never see your agent conversations, your local files, or your API keys.

Local-first architecture

  • Your agent runs on your machine or your VPS.
  • We do not have access to your workspace, your memory files, or your data.
  • If you stop using the product, your data stays with you.
  • You control where the system lives and what it can touch.

API keys and credentials

  • API keys and credentials are stored in your local OpenClaw config file, usually at ~/.openclaw/config.json.
  • They are never transmitted to TheAgentKit servers.
  • You are responsible for keeping your API keys secure and for managing access on your own systems.
  • If you expose keys, reuse them insecurely, or share access too broadly, you remain responsible for the consequences.

Liability disclaimer

  • TheAgentKit provides software infrastructure, not professional advice.
  • Results depend on how you configure and use the system.
  • We are not responsible for actions taken by AI models on your behalf.
  • AI outputs should always be reviewed before acting on them.
  • We are not liable for API costs incurred through your usage.
  • Use this at your own risk for business-critical operations, and review agent outputs carefully before you rely on them.

Open source notice

TheAgentKit is built on OpenClaw, available at https://openclaw.ai. Your use of OpenClaw is subject to OpenClaw's own terms and license.

Contact

For privacy questions, contact: kit@theagentkit.io

If you have questions about how your data is handled, ask before you connect sensitive systems. We would rather be straightforward upfront than vague later.