Privacy notice

Who is responsible for your data

IntentX is operated by Beyond Intent, Inc., a company registered in the United States. Beyond Intent, Inc. is responsible for the personal data described in this notice.

Our business mailing address is 131 Continental Dr, Suite 305, Newark, DE 19713, United States. For privacy questions or requests, email support@intentx.run.

Desktop browser data kept on your device

Browser cookies and sessions, task history, evidence, workflows, approvals, bookmarks, imported browser summaries, and preferences stay in the desktop app. Saved or imported HTTPS credentials use system Keychain-backed encryption. A password CSV remains where you exported it until you delete that source file.

AI-backed requests

When you request AI-backed work, IntentX may send the request and relevant text, page content, screenshots, audio, URLs, conversation history, or structured data to the AI service that processes it. Cookies, passwords, app credentials, and API tokens are excluded.

IntentX uses OpenAI for these requests. OpenAI retains the response records, including the information submitted with your task and the answer, for at least 30 days. Authorized members of the IntentX team may inspect these records to diagnose service issues. This retention happens at OpenAI, separately from the data saved in your app.

Google Workspace data

Google Workspace API connections are currently available only for controlled testing while Google's public-access review is pending. If you connect, you choose the services and permissions to authorize. IntentX uses your Google email address to identify the connected account. A later task that needs additional access asks you to authorize that access through Google.

Calendar read access lets IntentX read your calendars and events to answer agenda questions. Event access supports creating invitations and changing events; broader Calendar management access supports requested calendar changes. Proposed changes require your review and approval before execution.

Drive read access lets IntentX search file names and contents, inspect metadata and sharing permissions, and read or export files. If you authorize Drive management access, it can also create, edit, move, share, or delete files and folders, including Google Docs, when you request and approve those changes. Sheets access lets it read the spreadsheets you select, including recipient lists for reviewed email tasks; it does not edit spreadsheet cells under that read permission.

Gmail read access lets IntentX search and read messages, headers, labels, and selected message contents. Depending on the permissions you authorize, it can manage drafts, send messages, or organize your mailbox, including applying labels, changing read status, archiving, and moving selected messages to trash. You review and approve the proposed recipients and content before sending, and the selected messages and changes before mailbox updates. For a supported one-click unsubscribe, it reads the message's unsubscribe headers and, after your approval, sends a request to the sender's HTTPS unsubscribe address. Your Google access token is never sent to that address.

Google Workspace sign-in tokens are stored in an encrypted profile on your device. When you ask AI to work with Google Workspace data, selected message content, file content, spreadsheet values, calendar details, or related metadata may pass through IntentX's authenticated backend to OpenAI to complete your request. The AI processing and retention described above apply to this submitted context. We do not sell Google user data or use it for advertising. Disconnecting Google Workspace removes the saved sign-in from this device; you can also revoke access in your Google Account. This does not delete files, messages, events, or separate AI request records already created.

We do not use Google Workspace API data, including raw content, metadata, or derived data, to create, train, or improve generalized AI or machine-learning models. We do not provide this data to AI providers for their model training or improvement. Selected data is processed only to provide the user-requested features described above, with your consent; it is not sold, used for advertising, or transferred for unrelated purposes.

Human access to Google Workspace API data is limited to the cases permitted by Google's Limited Use requirements, such as your explicit agreement to view specific data for support, security investigations, or legal obligations. Disconnecting is separate from deleting task content or AI request records; use the deletion options and contact information below to request help.

IntentX's use and transfer of information received from Google APIs, including raw and derived Google Workspace data, adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Connected apps and tools

Connecting an app or tool is optional. You choose which services to connect and authorize the permissions they request. Agents use those connections to carry out your tasks, subject to the app's approval controls. Saved connection credentials stay encrypted on your device.

When a task uses AI, relevant information from a connected service may be sent to the AI service. The AI processing and retention described above apply. Disconnecting removes the saved connection from your device; you can also revoke access with the service. Disconnecting does not delete records already created in that service or separate AI request records.

Account and installation data

When you create an account, IntentX stores account and organization identifiers, device information, credential hashes, and limited service records. These records do not include the contents of your requests. If you connect Google in the app, your verified email replaces the temporary address created during setup. A business email domain may appear as your organization name; personal email accounts show “Personal workspace.”

IntentX sends your verified email to Mixpanel for an account profile. It may update that profile daily with your total tasks and browser opens for the current month. This profile is separate from website analytics. If you enable desktop analytics, its random analytics ID may be linked to your verified email. The totals are not a separate event for every task or browser open.

Saved agent configurations

When you choose Save agent in versions that support account storage, IntentX stores its name, description, instructions, boundaries, conversation starters, revisions, and save timestamps privately in your account. These records support saved agents and help us understand what kinds of agents people create. We do not send the configuration to product analytics services or make it available to other users. Authorized administrators can sign in to review the full saved configuration.

Drafts and builder chat stay on your device. Saving an agent does not publish it. Community sharing requires a separate submission. Deleting a saved agent removes private-only revisions from our database. Versions you explicitly submitted or shared retain their review and publication status; deleting your account also removes those records. Agents created in older versions are uploaded only when you save them again in a version that supports account storage.

Workflow sharing

Sharing a saved workflow or example to help improve IntentX is your choice; nothing is submitted automatically. If you choose to submit one, we may keep the request, website and URLs, steps with sensitive values removed, and a summary of the result for review. An approved workflow may be shared with other users.

Website analytics

We use Mixpanel to count website visits and installer downloads without identifying your browser. If you allow optional website analytics, it may remember a random browser ID, measure return visits, and estimate your country from your IP address. With the same permission, Google Analytics through Google Tag Manager measures visits using browser identifiers, device information, approximate country, and controlled public page categories. We supply Google with a sanitized page address and category instead of the raw URL, query string, hash, page title, or referring URL. We do not use session replay or send page contents, form entries, names, or email addresses through website analytics. Turning optional analytics off reloads the page to stop previously loaded Google tags.

Desktop app analytics and diagnostics

The desktop app does not automatically upload crash reports. Its optional product analytics is off by default and has its own switch in app Preferences. If you turn it on, Mixpanel receives a random analytics ID with app version, build type, and broad task progress: where a task started, the type of action, its outcome, duration range, and whether a result was verified. It may include the app or service category involved. Desktop analytics does not send your account ID, device ID, email, or IP-derived location as event fields.

Product analytics excludes prompts and task contents, page titles, full URLs and search parameters, account-specific site addresses, names, credentials, cookies, screenshots, audio, results from connected services, payment data, local file paths, and tasks in private sessions. We create a diagnostic export only when you ask for one; it excludes task contents, visited URLs, credentials, cookies, and page evidence.

Service providers and processing locations

We use Google Cloud and Firebase to host our services and website, OpenAI to process AI requests, and Mixpanel and Google Analytics for the analytics described above. These providers may process personal data in the United States and other countries where they operate. Their processing terms describe their security, subprocessors, and international transfer safeguards: Google Cloud, OpenAI, and Mixpanel.

When you connect another service or visit a website, that service also handles data under its own terms and privacy notice. Revoking an IntentX connection does not delete records you created in that service.

How long data is kept

• Data on your device: stays until you delete it using the app or remove its saved profile. Disconnecting a provider removes its saved sign-in from that device. Files you export or download remain until you delete them separately.
• Account and device records: remain while your account is active. Account deletion removes the account records described below; it does not automatically erase separate processor records, operational logs, or backups.
• AI request records: OpenAI retains stored responses and submitted task context for at least 30 days under its applicable data controls. This is a minimum, not a promise that all copies are deleted on day 30. See OpenAI's data controls. Local history deletion does not delete these provider records.
• Operational logs: the default Google Cloud application log bucket retains logs for 30 days. Separate security, audit, database, and backup records can have different retention periods; this is not a 30-day limit on all service data.
• Analytics: Mixpanel records can remain after you disable analytics or delete your account. We do not promise an automatic age-based purge of these records. Contact us to request deletion of identifiable analytics data.
• Support and submitted workflows: we keep these records to resolve your request or review and provide the content you chose to share. Contact us to request deletion or withdrawal; copies already shared with other users may remain with them.

We may retain limited records where needed for security, fraud prevention, legal obligations, or resolving disputes. Backup copies may remain until replaced under the hosting provider's backup lifecycle. We do not promise that every backup or processor copy is removed immediately when you delete local data or your account.

Deletion and privacy requests

Delete local data clears local browser and application state. When connected, IntentX also requests deletion of your account and its records from our service. If that request fails, your local data is still deleted; contact support to finish account deletion. Deletion stops future analytics, but earlier Mixpanel records may remain. Use the contact below to request their deletion.

You can ask to access, correct, export, or delete personal data we hold about you, withdraw optional analytics consent, or raise a privacy concern by emailing the address below. We may need to verify your identity before acting. We handle requests within the time limits required by applicable law and explain any information we need to retain. Depending on where you live, you may also have the right to object to or restrict processing and complain to a data protection authority.

Contact

For privacy questions or deletion help, email support@intentx.run. Do not send passwords, tokens, cookies, or private page contents.