Privacy Policy

Information we process

Depending on the features you use, Wolf Agent may process account email, password-derived authentication records, organization and workspace identifiers, session identifiers, task and mission content, conversation identifiers, device identifiers, generated artifacts, operational events and security logs. When you intentionally use voice features, Wolf Agent also processes microphone audio needed to provide the realtime voice session.

Passwords and authentication

Account passwords are stored as salted password hashes rather than plaintext passwords. Active sessions are represented by signed server-side session credentials. Security controls may revoke sessions when an account is signed out, expires, or enters deletion status.

AI processing and service providers

When you ask Wolf Agent to perform AI-powered work, the content needed for that request is sent only to the services that carry it out:

• OpenAI: AI chat, missions, realtime voice and image generation.
• Apify: public web and social-media research you request (it receives the public addresses or search terms of that request). Public social-media pages you ask Wolf to analyze may also be fetched directly from those sites.
• Google PageSpeed Insights: website performance audits (it receives the website address).
• Public internet lookup services (Google Public DNS, crt.sh, Cert Spotter, RDAP): domain and security checks (they receive the domain name).
• Business apps you choose to connect (Google Workspace and Gmail, Slack, HubSpot, Salesforce, Zoho, Attio, Hostinger): used only after you connect them and only for actions you request. Connection tokens are stored encrypted on our servers.

Voice and microphone

Wolf Agent requests microphone access only for voice features, and only when you start a voice session; it is not needed for text-only use. During a session, your voice audio is streamed over an encrypted connection to OpenAI's Realtime API, which powers Wolf Live.

Think Unlimited does not record or store your voice audio, and our voice server does not save transcripts of your voice sessions. Under OpenAI's published API data policy, data sent to its Realtime API is not used to train OpenAI's models and may be kept in OpenAI's abuse-monitoring logs for up to 30 days, longer only where required by law or needed to protect its services. If you ask Wolf to run a tool or mission by voice, that request is handled like any other mission.

Fingerprint sign-in

Fingerprint sign-in is optional and off by default. When you turn it on, the fingerprint check is performed by your phone's Android system. Wolf Agent never receives, sees or stores your fingerprint or any biometric template. Android only tells Wolf Agent whether the check succeeded and, if it did, unlocks an encryption key protected by the Android Keystore on your phone so Wolf Agent can open your saved session. You can turn fingerprint sign-in off at any time in Settings > Security.

Data use

We use information to authenticate users, enforce organization and workspace permissions, execute authorized tasks, return results, maintain service reliability, prevent abuse and protect Wolf Agent and its users.

Account deletion

You can delete your Wolf Agent account in the app (Settings > Delete account) or on our public account deletion page. After your password and confirmation are verified, your account is permanently deleted and all active sessions are revoked immediately. This cannot be undone.

Data retention

Deleted when you delete your account:

• Your account: email address, password hash, sessions, organization and workspace memberships, and access entitlements.
• Your organizations and workspaces, when no other member belongs to them.
• Your missions and task history.
• Your AI processing records on our servers: conversation and mission records, step traces, generated images and live mission progress.
• AI-reply reports you submitted.
• Your plan usage counters: messages, missions and Wolf Live minutes.

Kept after deletion, and for how long:

• Payment and activation records (your email address, payment reference, plan, amount, dates and approval notes): kept for 3 years after the end of the year in which the payment was made, to meet accounting, tax and fraud-prevention obligations, and then deleted automatically.
• Disaster-recovery backups: our servers make a daily backup, and each backup is deleted automatically within 5 days. Data from a deleted account can therefore remain in a backup for up to 5 days.
• Server logs: web server access logs (IP address, time, requested address and browser or app details) are deleted after 14 days; system service logs are deleted after 7 days.
• Copies held by AI providers: content sent to an AI provider before deletion follows that provider's own policy. Under OpenAI's published API policy, abuse-monitoring logs may be kept for up to 30 days.

Deleted automatically for every account, even without deleting your account: AI processing records on our servers 30 days after last activity; live mission progress after 7 days; AI-reply reports after 90 days; monthly usage counters after 13 months; server logs after 14 days (web) and 7 days (system). To prevent abuse of the free trial, a one-way hash of the network address used to start a free trial is kept for up to 48 hours and then deleted.

Data on your phone: chat messages shown in the app are held only in the app's memory while it is open. They are not saved on your phone and disappear when the app is closed, or right away when you tap Settings > Local chat > Clear conversation. Copies of conversations processed on our servers follow the retention rules above.

Request account deletion

Security

Wolf Agent uses authenticated tenant boundaries, organization and workspace authorization, encrypted transport, protected credential storage and server-side session controls. No security control can eliminate every risk, so protections are continuously reviewed and improved.

Developer and privacy contact

Wolf Agent is operated by Think Unlimited in Lebanon. Privacy questions, data inquiries, and account-related privacy requests can be submitted through the official Think Unlimited contact page.

Changes

This policy may be updated as Wolf Agent evolves. Material changes will be reflected on this page.

Effective date: September 7, 2026 · Last updated: October 3, 2026