Privacy Policy

1. Who we are & what the app is

The Agency Companion app ("the app") is provided by Agency Scripts ("we", "us"). It is a free native companion app for iOS, iPadOS, macOS and Android that connects to FiveM / GTA V roleplay game servers running our Agency Scripts. After you pair with a server (by scanning a QR code an in-game script shows), the app lets you use companion features for those scripts — for example the in-game phone/pad, Agency-Banking, Agency-Admin, Agency-Doorlock, Agency-Elevator, Agency-Reports and Agency-Essentials — plus home-screen widgets and an Apple Watch app.

The app also includes a built-in Help & Support centre (the same ticket system as our website help.agencyg.de), where AgencyAI and, when needed, our human team answer your questions.

Contact for any privacy question: [email protected]

2. The short version

• We do not show ads, and we do not use any analytics or third-party tracking.
• We do not sell your data, and we never use your data for advertising.
• The companion features handle your in-game roleplay data (fictional character data), not your real-world identity.
• The camera is used only to scan a pairing QR code, on your device.
• Support is optional: you only create an account and share data with support if you choose to open a ticket.

3. Companion features — in-game data

Pairing token

When you scan the QR code shown by an in-game script, the app stores a randomly generated device token on your device. It links the app to that script on a specific game server and contains no real name, email or real-world identity.

Camera

The camera permission is used solely to scan the pairing QR code. The image is processed on your device to read the code and is not stored and not transmitted to us or anyone else.

In-game content you choose to view

When you open a feature, the app requests the matching in-game data from your game server (e.g. phone messages, contacts, wallet/bank balance, transfers, reports, admin data). This is fictional in-game roleplay content tied to your character; it is shown to you and used for no other purpose. Money-related actions (e.g. banking transfers) are only carried out live against your server, never simulated.

Connection (relay) service

Requests are routed over an encrypted (HTTPS) connection through our relay at api.agencyg.de to your game server and back. The relay validates your device token and passes messages through; it does not permanently store your in-game content.

Notifications & local storage

If you enable notifications, the app periodically checks for new in-game activity and shows a local notification. Your device token and settings are stored locally using the operating system's secure (encrypted) storage and are not uploaded to us.

4. Help & Support (help.agencyg.de) — ticket data

You can reach support in two equivalent places — the website help.agencyg.de and the Support tab inside the app — and it is the same ticket either way. This part only applies if you choose to open or take part in a ticket.

Sign-in & account

To open a ticket you sign in with Discord, Sign in with Apple, or Google. We store the identifier, display name and (if you provide or it is shared) the email address and avatar for that account, so we can show your tickets and notify you. You can link an Apple/Google login to your Discord account; if you do, the accounts are merged internally and Discord becomes the primary identity, and your existing tickets move to it.

Ticket content

We store the tickets you create and the messages in them — subject, category, message text, the detected language, status, and any images or files you attach. Attachments are stored on our support server with access limited to you (and any people you invite to the ticket) and our team. We also process a Tebex transaction ID you enter to verify a purchase (checked with Tebex; see §7).

AgencyAI (automated answers)

Inside a ticket, an AI assistant ("AgencyAI") reads the ticket's messages to generate an answer. To do this, the ticket's message content is sent to our AI sub-processors — Anthropic (Claude) and, as fallbacks, OpenAI and Groq — which process it only to produce the reply and do not use it to train their models. Do not put sensitive real-world personal data (e.g. passwords, payment card numbers) into a ticket. A human team member can take over at any time.

Sharing a ticket

If you use the "share" option, anyone who opens the link and signs in is added to that ticket as a participant and can read and reply to it. Only share a ticket with people you trust. The ticket owner (or our team) can delete the ticket.

Notifications about your ticket

We notify you about replies and status changes by Discord direct message and/or by email (sent via our email provider, Brevo) if you gave an email. These messages are transactional (about your ticket), not marketing.

Legal basis

Processing support data is necessary to provide the support you request (Art. 6(1)(b) GDPR) and rests on our legitimate interest in running a secure, effective help desk and preventing abuse (Art. 6(1)(f) GDPR).

5. Permissions we request

• Camera — to scan the pairing QR code.
• Internet / network — to connect to your game server through the relay and to reach the support service.
• Photos / files — only when you choose to attach an image or file to a support ticket.
• Notifications — optional, for in-game alerts and support replies.
• Vibration — optional, for haptic feedback.

6. Data sharing and sub-processors

We do not sell your data. We rely on the following providers, each only for its stated purpose and under its own privacy terms:

• Cloudflare / our relay — routing the connection to your game server.
• Anthropic, OpenAI, Groq — generating AgencyAI answers from ticket content (support only).
• Discord, Apple, Google — sign-in to support and (Discord) notifications.
• Brevo — sending transactional support/notification emails.
• Tebex — verifying a purchase transaction ID.
• Apple, Google, our shop — processing Companion Pro purchases (see §11).

Your game server is operated by the server you pair with; the in-game data you view comes from and belongs to that server.

7. Data retention and deletion

You can unpair / log out at any time, which revokes the device token; uninstalling removes locally stored data. For support: you can delete your own ticket in the app or on the website (which deletes its messages and attachments), and closed tickets are automatically deleted after a retention period (about 90 days). Purchase-verification records are kept only as needed for fraud prevention. To request any further deletion or a copy of your data, contact us at the email above.

8. Children

The app is not directed at children and is intended for users who play on FiveM roleplay servers.

9. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top reflects the latest version.

10. Contact

Agency Scripts · [email protected]

11. Purchases, referrals and third-party services

The base app does not collect personal data about you. Two optional, commercial features involve a small amount of processing by us or by an app store, described here for transparency.

Purchases

Agency Companion Pro is an optional one-time purchase. When you buy it, the purchase is processed by Apple (App Store / StoreKit) or Google (Google Play Billing), or - for a direct Android licence - by our shop at shop.agencyg.de and its payment provider. Those parties process the payment and receipt data needed to complete and validate the purchase under their own privacy policies. We never receive your card or bank details.

Referral programme

If you choose to take part in the referral programme, our referral service processes a device identifier derived on your device and the IP address of the request, only to credit referrals correctly and to prevent fraud and abuse (self-referrals, fake devices, automated claims). The legal basis is our legitimate interest in running a fair programme and preventing abuse (Art. 6(1)(f) GDPR). This data is kept only as long as needed for those checks and for the reward's validity, is never used for advertising, and is never sold. If you do not use the referral programme, none of this applies.

Your rights

Subject to applicable law, you may request access to, correction or deletion of, or restriction of the data described above, object to its processing, and lodge a complaint with your data-protection authority. Contact us at [email protected].