Privacy Policy

Agency OS is operated by Johannes Brauner, Hein-Hoyer-Str. 23, 20359 Hamburg, Germany. Contact: support@agencyos.studio

• Account data: name and email address
• Billing data: payment information processed by Stripe (we never store card details)
• Usage data: pseudonymised product analytics via PostHog, linked to your account ID (not your name or email)
• Crash and diagnostic data: crash reports and error diagnostics via Sentry, including device model, OS version and the sequence of screens leading up to an error. Collected only with your consent.
• Advertising data: if you accept advertising cookies, the Meta Pixel records which pages you visit and whether you sign up or subscribe, so we can measure and improve our ads on Facebook and Instagram. Collected only with your consent.
• Support data: messages via Crisp support chat
• Content data: jobs, clients, crew, invoices you enter into Agency OS

• Contract performance (Art. 6(1)(b)): to provide the Agency OS service
• Legal obligation (Art. 6(1)(c)): tax and accounting compliance
• Legitimate interests (Art. 6(1)(f)): anonymised analytics and fraud prevention
• Consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG): non-essential cookies — analytics (PostHog), error monitoring (Sentry) and advertising (Meta Pixel) — where you have given explicit consent. You can withdraw consent at any time via "Cookie settings" in the footer.

• Supabase — database and auth, hosted in London (UK). Privacy Policy
• Stripe — payment processing. Privacy Policy
• Vercel — hosting; server functions run in London (UK), next to our database. Privacy Policy
• PostHog — product analytics, EU servers. Privacy Policy
• Sentry — crash reporting and error monitoring, EU servers. Privacy Policy
• Crisp — support chat. Privacy Policy
• Resend — transactional email. Privacy Policy
• Meta Platforms Ireland Ltd. — Meta Pixel for ad measurement, only with your consent. For data collected via the pixel, we and Meta are joint controllers (Art. 26 GDPR); Meta's responsibilities are set out in its Controller Addendum. Data may be transferred to Meta Platforms, Inc. in the USA under the EU–US Data Privacy Framework. Privacy Policy
• Vercel Speed Insights — measures page load performance (Core Web Vitals). Cookie-free and without personal data.
• Vercel Web Analytics — counts page views and visitors (page path, referrer, country, device type). Cookie-free: visitors are recognised only by a hash that resets daily, and no personal data is stored. URL parameters are removed before sending.

All sub-processors are bound by Data Processing Agreements (DPAs) per GDPR Art. 28.

• Essential cookies: required for authentication and security. Cannot be disabled.
• Analytics cookies: PostHog collects anonymised usage data. Only set with your consent.
• Advertising cookies: the Meta Pixel sets the _fbp cookie and sends page views and sign-up/purchase events to Meta. Only loaded after you choose "Accept all"; with "Essential only" it is never loaded.
• Crash reporting: in the mobile app, Sentry and PostHog are only initialised after you accept the consent prompt on first launch. Declining means neither is started and no data leaves your device.

Data is retained while your account is active. On account deletion, all personal data is permanently deleted immediately. Billing records are retained for up to 10 years per German tax law (§ 147 AO).

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)

Contact us at support@agencyos.studio. We respond within 30 days. You may also lodge a complaint with the HmbBfDI Hamburg.

Where data is transferred outside the EU/EEA, we ensure Standard Contractual Clauses (SCCs) are in place per European Commission requirements.

We will notify you of significant changes by email or in-app notice. The date at the top reflects the most recent update.

support@agencyos.studio