Privacy and what Uncanny Agent can see

Because Uncanny Agent works on your behalf inside your WordPress site, it’s fair to ask: what data does it actually see, where does that data go, and how long is it kept? This article answers those questions.

What Uncanny Agent can read

To be useful, Uncanny Agent has access—through the same APIs a site administrator uses—to the parts of your site needed to do the work you ask of it. That includes:

• Your installed plugins and connected integrations (so it knows what’s available)
• Your Uncanny Automator recipes, logs, and settings
• Content types (posts, pages, products, courses, lessons, etc.) and their metadata
• User and customer information you ask it to look up

Uncanny Agent doesn’t browse this data on its own initiative. It accesses what it needs to fulfil a request and only when that request is sent.

What is sent for processing

When you send a message, this is what Uncanny Agent processes:

• your prompt and any attachments you include
• a short summary of relevant context from your site (for example, the list of installed integrations, or the recipe you’re asking it to fix)
• any additional data necessary to process your request (for example, the content of a blog post if you asked it to update a blog post, the name of a user if you asked it to enroll a user in a course)
• the recent messages in the current conversation

These are sent to the AI service that powers Uncanny Agent. Your full WordPress database is not transferred—only the specific pieces relevant to the task.

What’s stored, and where

• Conversation history is stored so you can revisit past chats and so Uncanny Agent can carry context within a conversation. You can delete individual conversations at any time from the conversation history sidebar.
• Usage data (for example, how much of your Uncanny Agent usage allocation has been consumed) is stored to power the Usage card on your dashboard.
• Feedback (👍/👎 and any comment you write) is stored and reviewed by the Uncanny team to improve the Agent.

What is not used to train AI models

Your prompts, attachments, and the contents of your site are not used to train the underlying AI models. They’re used only to respond to your requests within Uncanny Agent.

What you should avoid sending

As a general rule, treat Uncanny Agent the way you’d treat any cloud service:

• Don’t paste raw passwords, API keys, or payment details
• Be cautious about uploading files containing personally identifiable information that doesn’t need to be there for the task
• Use test data in screenshots when you’re demonstrating a problem rather than illustrating it with real customers

Deleting your data

• Per-conversation: Hover a conversation in the history sidebar and click Delete.
• Account-wide: Use the data deletion tools in your Uncanny Automator account at automatorplugin.com/my-account/, or contact support for a full account-level deletion request.

More information

For Uncanny Automator’s overall data-handling, see the existing knowledge base article Data Privacy and GDPR, and Uncanny Owl’s Privacy Policy for the legal basis and full data-handling terms that also cover Uncanny Agent.