Privacy

Last updated September 18, 2026. Agreed stores the minimum needed to run accounts, conversations, and optional SMS.

What we collect

• Account — username, password hash, optional about text, interests, avatar.
• Phone — if you provide one, for verification and (only if you opt in per conversation) SMS copies of messages.
• Conversations — topic, participants, facilitators, messages, timestamps. Idle rooms are archived after 7 days and deleted after 30 days of no activity.
• Contact form — name, email, and the message you send.
• Technical — standard request logs (path, status, timing) for operating the API.

Where it lives

Application data is stored as JSON objects in DigitalOcean Spaces under the existing agreed/ prefix. Passwords are hashed. We do not sell user lists.

SMS

Verification codes and conversation texts are sent through Twilio when you ask for them. Opting into SMS on a campaign stores your username on that conversation’s opt-in list. You can leave a conversation to stop those copies.

Facilitator bots

This website does not send your chats to an LLM by itself. If Grok Bots are connected, they read conversations they are assigned to and may post facilitator messages. Treat those bots as operators with access to those threads.

Cookies and caching

Login uses a token in localStorage, not a tracking cookie. Static files may be cached in the browser or a service worker. API responses are not cached.

Your requests

For export or deletion of an account, use the contact form with your username. We will match it to the stored profile and remove or provide the JSON we hold.