Privacy Policy
Effective: 24 August 2026.
This notice explains how AgentRelay MCP, operated under the AgentForge Labs brand, handles personal information when you visit the site, buy a plan, configure the gateway or use the messaging service. The legal entity responsible for controller-side processing is the service operator identified in your order confirmation or invoice.
1. Information you provide
We may receive account and contact information such as name, work email, organization, support messages and billing identifiers; configuration information such as agent/source names, bot or integration identifiers and pairing state; and content you intentionally route through the service, including messages, replies, files and associated metadata.
2. Information generated automatically
We may process IP address, browser/device information, request timestamps, service events, usage counts, delivery status, error information, security/audit events and other technical data needed to operate and protect the service. The website may use local browser storage for cart or session functionality. Payment providers may use their own cookies or similar technologies on hosted checkout pages.
3. Telegram-related data
When you connect a Telegram bot or conversation, the service may process the minimum identifiers, message/file content and delivery/reply metadata needed to perform your requested workflow. We do not claim ownership of that content. We do not sell message or file content and do not use it to train general-purpose AI models. Telegram independently processes data under its own terms and privacy policy.
4. Payment information
Checkout may be provided by Dodo Payments or Lemon Squeezy. Full card numbers and card-security codes are handled by the payment provider, not stored by AgentRelay MCP. We may receive order, customer, plan, tax jurisdiction, transaction status and subscription identifiers needed for provisioning, accounting, fraud prevention and support.
5. Why we process information
We process information to provide and administer the service; authenticate and pair integrations; route messages and replies; meter usage; maintain reliability and security; prevent spam, abuse and fraud; provide support; process subscriptions; comply with law; and improve the product based on operational performance. Depending on context and jurisdiction, our legal bases may include performance of a contract, legitimate interests, legal obligations and consent.
6. When we share information
We may disclose information to infrastructure and service providers that help us host, secure, monitor, support or bill the service; to Telegram or another destination you instruct us to use; to payment/merchant-of-record providers for checkout; to professional advisers under confidentiality obligations; or to authorities when legally required. We do not disclose customer message content to advertising data brokers.
7. Retention
We keep account, billing and service records only for as long as needed for the purposes described above, contractual commitments, dispute handling and legal/accounting obligations. Message and file content is retained only as necessary for configured delivery, reply handling, troubleshooting or customer-selected retention. Security and audit data may be retained longer where reasonably necessary to investigate abuse or incidents. When data is no longer needed, we delete or de-identify it, subject to limited backup retention.
8. International transfers
Depending on the infrastructure, payment provider and messaging destination selected, personal information may be processed in the European Economic Area, United States or other countries. Where data-protection law requires a transfer mechanism, we use appropriate safeguards such as adequacy decisions, Standard Contractual Clauses or another lawful mechanism. Telegram and payment providers may have their own transfer mechanisms for processing they control.
9. Security
We use technical and organizational safeguards appropriate to the service, including server-side secret handling, access controls, network encryption where supported, signed payment webhooks, least-privilege operational practices, logging and procedures intended to detect misuse. No system can guarantee absolute security, and customers remain responsible for securing their bots, agent credentials, endpoints and recipient access.
10. Your choices and rights
Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, obtain portability, withdraw consent, or complain to a data-protection authority. You may also cancel a subscription and disconnect bots or sources. Rights can be limited where retention or processing is required by law or necessary to establish or defend legal claims.
11. EEA/UK/Swiss users
For controller-side processing, the operator may rely on contract, legitimate interests, consent and legal obligations as applicable. Where AgentRelay MCP processes personal data solely on a business customer's documented instructions, the customer ordinarily acts as controller and the Provider as processor under the DPA.
12. Children
The commercial service is not directed to children under 18 and we do not knowingly market it to them. If you believe a child has provided personal information without appropriate authorization, contact us so the situation can be reviewed.
13. Changes and contact
We may update this notice as the service or law changes and will post a revised effective date. Privacy requests can be submitted through the support contact shown in the dashboard, order confirmation or purchase receipt. Do not include bot tokens, passwords or private keys in a privacy request.