Privacy PolicyPrivacy Policy

Who this covers

Agentform is the product. It is offered at tellme.sh by Mosnin Co.. This policy covers visitors to the marketing site, people who create an individual account, and people who fill a published form. There are no organization accounts.

If you publish a form, you decide what to ask. You are responsible for the personal data you collect from respondents. For that respondent data, you are the controller and Agentform is the processor. See the Data Processing Addendum.

What we collect

Account holders

Authentication is handled by Clerk. We receive the identity Clerk issues, typically an email address and a stable user id. We store profile fields you set in Settings, plan state, optional branding, API keys you create, and a timestamp if you join the in-app Pro waitlist.

Forms and submissions

We store form definitions, field blocks, flow instructions, draft and published state, conversation transcripts, field answers, completion status, and analytics counts (views, starts, completions). Optional file and image uploads are stored as objects you attach to a submission.

Voice

If you enable voice, the browser opens a realtime session with OpenAI. Audio is processed so the turn can be transcribed and sent through the same agent path as typed messages. Do not enable voice if you cannot send that audio to OpenAI.

Technical data

We keep logs needed to operate the service, including request metadata, rate-limit counters, and error reports. If a Sentry DSN is configured, error events may be sent there. See the Cookie Policy for cookies and local storage.

How we use it

• Operate Agentform: sign-in, builder, live forms, embeds, analytics, and settings.
• Run the builder and form agents through OpenRouter (and a local fallback only when explicitly enabled in non-production).
• Deliver webhooks you configure, including a shared secret if you set one.
• Serve MCP tools to clients that present a key you issued.
• Enforce the free-plan limits on published forms, submissions, and uploads.
• Respond to support mail at mosninco@gmail.com.

We do not sell respondent data. We do not use advertising cookies.

Where data lives

• Clerk for authentication.
• Convex for application records and realtime.
• Wasabi (S3-compatible object storage) for file and image uploads, using short-lived signed URLs.
• OpenRouter for model inference when an agent runs.
• OpenAI for realtime voice when voice mode is used.
• Vercel for hosting the Next.js app.

Mosnin Co. does not publish a separate EU establishment or a postal address on this site. Processors may store data in the United States or other regions they operate. If that is not acceptable for your use, do not submit the data.

Webhooks and MCP

If you set a webhook URL, completed submissions are sent to that endpoint. If you issue an MCP key, any client that holds the key can read and change forms and submissions for your account until you revoke it. Those destinations are yours. We cannot control what they retain.

Retention and deletion

Signed-in owners can delete their account from Settings. That cascade removes associated forms, conversations, submissions, files, API keys, and waitlist rows we store for that account. Clerk will also hold the auth record until that deletion completes on their side.

To ask us to delete a specific respondent submission, or if account deletion fails, email mosninco@gmail.com from the address on the account. We may need enough detail to find the record.

Children

Agentform is not directed at children under 16. Do not create an account or publish a form that targets children if you cannot meet the rules that apply to you.

Changes and contact

We will update this page when the product or processors change. The date at the top is the latest revision. Questions: mosninco@gmail.com.