Privacy Policy
Last updated 3 November 2026
Extremely Autonomous Agents is made by WORLD ASSET REGISTER Pty Ltd (ACN 698 264 765). This policy describes how we handle your personal information when you use the Extremely Autonomous Agents app, its online services, and this website at extremely.agency.
How we handle personal information is governed by the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles. In this policy, we, us and our mean WORLD ASSET REGISTER Pty Ltd and our related companies.
The short version. Your agents run on your own computer. What they work on - your agents, their conversations, the keys and sign-ins you connect, and anything they read from your email, files or other services - stays on that computer (for an organisation, on the owner's computer). We never receive it. What we hold is what's needed for accounts and organisations: your name, email address, the organisations you're in and your role in them.
1) When this policy applies
It applies when you:
- download or use the Extremely Autonomous Agents app;
- sign in, create or join an organisation, or invite someone; or
- visit extremely.agency.
By providing personal information to us, you consent to us collecting, holding, using and disclosing it as described in this policy.
2) What personal information is
Personal information is information that identifies you, or could reasonably identify you as an individual. This includes facts and opinions, whether true or not.
3) What stays on your computer
The app runs your agency on your own computer. These are stored there, and are not sent to us:
- your agents, their instructions, schedules, run history, messages, approvals and requests;
- the keys and sign-ins you connect - to AI models and to services such as Gmail or GitHub - which are encrypted on your computer;
- whatever your agents read or make while they work: emails, documents, calendar entries, files and notes; and
- your profile and organisation profile, which your agents use to know who they work for.
In an organisation, all of this lives on the computer of the organisation's owner (the "host"). Members reach it through an end-to-end encrypted connection; our relay passes it on without being able to read it, and doesn't keep it.
4) What we collect
For signing in and organisations, our online service keeps:
- your name and email address, from the sign-in you choose (email code, Google or GitHub), and the display name you set in the app;
- the organisations you own or belong to, your role in each, and when you joined;
- invitations: the email address invited, who invited them, and whether it was used;
- for an organisation's host computer, its public key, a fingerprint of its relay secret, and when it was last online;
- records of our communications with you, including questions and complaints; and
- if you join the waitlist on this website, your email address.
We don't collect payment information today. If we start charging, we'll update this policy first.
5) AI models you connect
To do their work, your agents send what they're working on to the AI model you've connected - for example Claude, ChatGPT, GitHub Copilot or a model on your own computer. That goes from your computer straight to that provider, under your own account and their terms and privacy policy. We don't receive it, and we don't choose which provider you use.
6) Information from Google and other services you connect
When you connect a service such as Gmail, Google Drive or Google Calendar, you sign in with that service and approve what the app may do. For Google services:
- What's accessed: only what the integration you connect needs - for Gmail, reading, searching, labelling, archiving and drafting email, and sending it (sending to anyone but you always waits for your approval); for Drive or Calendar, the files or events it is given access to.
- How it's used: only to carry out the tasks you set your agents, for you or your organisation.
- Where it's kept: on your computer (or your organisation's host). The sign-in tokens are encrypted there. Nothing from your Google account is sent to us.
- Who it's shared with: only the AI model you have connected, so it can do the task, and anyone your agents send to at your direction. It is not sold, not used for advertising, and not used by us to develop or train AI models.
- People: nobody at WORLD ASSET REGISTER reads it.
- Stopping: disconnect the service in Settings → Connectors, or remove the app's access in your Google Account's security settings.
Extremely Autonomous Agents' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Other services you connect work the same way: their data stays on your computer, goes only to your AI model for the work, and is governed by that service's own terms.
7) Why we collect your personal information
- to sign you in and keep your account secure;
- to run organisations: members, roles, invitations, and letting members reach their organisation's host;
- to send invitations and messages you ask for, and service notices;
- to answer questions and complaints;
- to operate, protect and improve the service; and
- to meet our legal obligations.
8) Who we share it with
We use these providers to run the service, each only to the extent needed to provide their part:
- Clerk - sign-in;
- Railway - hosting our online service and its database;
- Resend - sending invitation emails;
- Cloudflare - this website and its domain; and
- GitHub - hosting app downloads.
In an organisation, members can see each other's names, email addresses and roles. We won't sell your personal information. We may disclose it where the law requires or permits.
Some of these providers are located overseas, including in the United States, and may not be subject to Australian privacy law. We take reasonable steps to ensure they handle personal information in line with it.
9) How we protect it
We take reasonable steps to protect your personal information from misuse, loss and unauthorised access, in line with industry standards: connections are encrypted, organisation traffic is end-to-end encrypted through our relay, and keys and sign-ins are encrypted on your computer. Keep your computer and your sign-in secure; anyone who can use your computer can use your agency.
We can't guarantee the security of the internet as a whole, or of the AI models and services you choose to connect.
10) Cookies, analytics and tracking
We want to make sure every interaction you have with us is as good as possible. To do this, our website and app may use tracking technology such as IP addresses, cookies, web beacons and JavaScript, alone or through analytics and advertising providers such as Google Analytics, Microsoft Clarity or PostHog.
We use these to analyse trends, see how the website and app are used, measure advertising, fix problems and improve the experience. They can collect information such as your device and browser, IP address, pages viewed, clicks and interactions, and may store it in the United States or other countries. Most web browsers let you erase cookies, block them, or warn you before one is set; some parts of the site may not work fully without them.
Analytics never include the content your agents work on, or anything from the services you connect - that stays on your computer, as described above.
11) Keeping and deleting your information
We keep your account information while you have an account. Deleting an organisation removes it, its members and its invitations from our service. To delete your account, email us (below). What's on your computer is yours to delete: uninstalling the app and removing its data folder removes it.
12) Marketing
We'll only send you marketing emails if you agree to them, and every one has an unsubscribe link. You can also email us with "unsubscribe" in the subject line.
13) Accessing and correcting your information
You can ask what personal information we hold about you and ask us to correct it, using the contact details below. We'll respond as soon as we reasonably can. If we can't do what you ask, we'll tell you why in writing.
14) Questions and complaints
If you're unhappy with how we've handled your personal information, contact us and we'll investigate and respond, usually within 30 days. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC).
15) Changes to this policy
We may update this policy. Changes take effect when posted here; for significant changes we'll also tell you in the app or by email.
16) Contacting us
By email: info@worldassetregister.com
By post:
Privacy Officer
WORLD ASSET REGISTER Pty Ltd
Level 2 / 199 Toorak Rd
South Yarra VIC 3141 Australia