Privacy Policy

Effective date: April 16, 2026.

This Privacy Policy explains how the operator of agents.institution.art collects, uses, stores, and protects information when people use this museum-staff agent service.

What This Service Does

Tomino - Tom's agent is a private agent workspace for museum staff workflows. It can connect to Google services, process prompts, retrieve grounded source material, draft content, and support internal work.

Information We Collect

• Account and profile information provided through Google sign-in, such as name, email address, and Google account identifier.
• Connector data that you choose to sync or write through the service, including Gmail, Google Drive, Google Docs, Google Sheets, Google Calendar, and Google Contacts data.
• Workspace inputs and outputs, including chat prompts, draft requests, sync settings, workflow state, and generated results.
• Technical and security data, including signed session cookies, service logs, timestamps, and error records.

How We Use Information

• To authenticate users and maintain secure private workspaces.
• To retrieve, index, summarize, draft, and write back content at the user’s direction.
• To operate, secure, debug, monitor, and improve the service.
• To maintain auditability of syncs, drafts, and workflow actions.

Cookies And Session Data

This site uses an HTTP-only session cookie to keep an authenticated workspace session active after sign-in. That cookie is used for authentication and session continuity, not for advertising.

Third-Party Services

This service relies on third-party infrastructure and APIs, including Google APIs for connected account access, OpenAI for model-based processing, and Amazon Web Services for hosting and secret management. Depending on deployment configuration, vector or retrieval infrastructure may also be used to support search and grounding.

How Data Is Stored

Connector credentials are stored in encrypted or secret-managed form. Synced workspace materials, logs, workflow records, and generated artifacts may be stored in service databases or related infrastructure used by this deployment. Data is intended to remain scoped to the relevant workspace owner unless a deployment is explicitly configured for broader sharing.

Data Retention

Data is retained for as long as needed to operate the workspace, preserve audit history, maintain security, and support institutional workflows, unless it is deleted or retention settings are changed by the service operator.

Security

We use reasonable administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is guaranteed to be completely secure, and the service is provided with that limitation in mind.

Your Choices

You can choose what accounts to connect, what content to sync, and whether to continue using the service. You can also disconnect or stop using a connected workflow, subject to institutional controls and any retained audit records.

Changes To This Policy

This Privacy Policy may be updated from time to time. When changes are made, the revised version will be posted on this page.