AGL Connect

Privacy

AGL Connect Privacy Policy

Last updated: September 12, 2026.

This is the privacy policy for AGL Connect, an MCP connector built by Agile Growth Labs. AGL Connect runs inside Claude, ChatGPT, and other clients that install MCP servers by URL. This page tells you what we read, what we keep, and what we never do.

Read it. If anything is unclear, email support@agilegrowthlabs.com and a person will answer.

Who we are

AGL Connect is operated by Agile Growth Labs. Henry Kraus is the data controller. Contact: support@agilegrowthlabs.com.

What AGL Connect does in plain words

AGL Connect helps 2 parties find each other. You raise a hand for what you offer or what you want. Other members do the same. The connector ranks the other side. When you ask for an intro, Henry reviews it and sends it by hand. Bots never get your email.

What data we collect

We collect 3 things, and only when you act.

1. Your verified email when you sign in with a 6-digit code. From it we derive your domain. We also keep the name you give us, or the part of your email before the @ if you give none.
2. The hands you raise. Each hand has: side, category, headline, details, segment, criteria, and a public flag. You choose every value.
3. The intro requests you make. Each has 1 to 2 lines of context you wrote, plus the draft note we write for Henry to review.

If your assistant stages feelers to people found on the public web, we store their name, company, and public URL as a feeler draft. We do not store them as members. They become members only if they raise a hand.

What we do not collect

We do not run analytics pixels or third-party trackers. The connector serves JSON and nothing else.

We do not buy, rent, or enrich data. We do not sell or share your data with advertisers or data brokers. Ever.

Where it goes

Your data sits in 1 Postgres database hosted on Supabase in the United States. Only the connector and Henry can read it. The connector never returns another member's email to any caller.

How we use it

1 thing: to match hands and to draft intros for Henry to approve. If Henry sends an intro, both sides get 1 short email with the other side's name, company, and headline. If he does not send it, nothing goes out.

How long we keep it

Your hands stay open until you withdraw them or delete your data. Server logs (timestamp, tool name, your email, response code) are kept for 30 days, then deleted. Logs do not contain tool arguments or assistant outputs.

How to delete your data

2 ways.

1. Ask your assistant to call delete_my_data. Your member record and everything tied to it is deleted at once.
2. Email support@agilegrowthlabs.com from the address you signed in with. Subject line: "delete my AGL Connect data." We confirm and delete within 3 business days.

How to see what we have on you

Ask your assistant to call my_hands. Or email support and we send the rows as JSON within 3 business days.

How to fix what we have on you

Withdraw the hand with withdraw_hand and raise a new one.

Who can see your hands

1. You.
2. Other signed-in members who run find_matches. They see your company, headline, and segment. Not your email.
3. Anyone on the web, if you set a hand to public. Public hands show on the members page with your name and company. Want hands on the open wants page show headline, segment, and category only. No name.
4. Henry Kraus and any AGL engineer doing security or debugging work, under a written confidentiality obligation, only when needed.

Children

AGL Connect is for business use. Do not use it if you are under 18.

Security

All traffic is TLS. The database is encrypted at rest. Sign-in uses OAuth 2.1 with PKCE and an email one-time code. Access tokens last 24 hours. Refresh tokens last 30 days and rotate on use.

We are a small team. We do not claim SOC 2 today. If a breach happens, we notify affected members by email within 72 hours of discovery.

Your rights

If you live in the EU, UK, California, or any other place with a privacy law, you have the rights that law gives you: access, correction, deletion, portability, and the right to complain to your regulator. Use the contact above.

We do not sell personal data, so the opt-out-of-sale right does not apply.

Changes to this policy

If we change this policy in a way that affects you, we post the new version at this URL, change the date at the top, and email everyone with an open hand.

Contact for data requests

Email: support@agilegrowthlabs.com
Subject lines we recognize: "access my data", "delete my data", "correct my data", "complaint."
We answer within 3 business days.