Privacy Policy

This Privacy Policy explains how Agentzi B.V. ("Agentzi", "we", "us", or "our") processes personal data when you visit https://www.agentzi.com ("Website"), use https://app.agentzi.com ("Platform"), contact us, or interact with our marketing.

We may update this policy by posting a new version on this page and changing the "Last updated" date. We encourage you to review it periodically. Material changes may be communicated through the Platform or email where appropriate.

For the Website, account administration, billing contact details, and product operations described here, Agentzi acts as an independent controller under the EU General Data Protection Regulation ("GDPR") and applicable Dutch implementation law.

For most content your organization stores in a Tenant (employee messages, customer records you upload, files, and similar Customer Data), your organization is typically the controller and Agentzi acts as a processor when we handle that data solely to provide the Platform. In that case our Data Processing Agreement ("DPA") applies when required by law or when you execute one with us. Request the DPA at privacy@agentzi.com.

Contact for privacy questions:
Agentzi B.V., the Netherlands
privacy@agentzi.com

This policy covers personal data we process as controller. It does not describe how your organization processes data about its own employees or customers inside a Tenant; your administrator's policies apply there.

Third-party websites linked from the Website (including integration providers) have their own privacy policies.

Website visitors and prospects

• Contact details you submit (name, email, company, message content) on forms, workshop requests, or email.
• Technical data: IP address, browser type, device identifiers, referral URL, and approximate location derived from IP.
• Cookie and similar technology data as described in our Cookie Policy.
• Professional contact data from public sources or partners where permitted, for B2B outreach (you may opt out).

Platform users

• Account identifiers: name, email address, profile image if provided, organization memberships and roles.
• Authentication data: magic-link tokens (hashed or short-lived), session identifiers, optional OAuth subject IDs from Google or Microsoft when enabled.
• Workspace activity: messages, tasks, goals, audit events, and configuration needed to operate features you use.
• Billing and subscription metadata: plan, seat counts, work budget consumption, invoices, and payment status (payment card data is handled by our payment processor, not stored by us as full card numbers).
• Support communications and feedback you send us.
• Security logs: sign-in attempts, IP addresses, user agent, and administrative actions.

Demo users

Demo mode uses mock tenant data. Avoid entering real personal data in demo sessions. We may set short-lived cookies to keep demo state; see the Cookie Policy.

Where GDPR applies, we rely on the following bases depending on context:

1. Contract (Art. 6(1)(b)): providing the Platform, accounts, support, and billing you request.
2. Legitimate interests (Art. 6(1)(f)): securing the service, preventing abuse, improving features, B2B marketing to existing prospects, and aggregated analytics, balanced against your rights.
3. Legal obligation (Art. 6(1)(c)): tax, accounting, and compliance records.
4. Consent (Art. 6(1)(a)): optional marketing emails, non-essential cookies where required, and other processing where we ask for consent. You may withdraw consent at any time.

Special-category data is not intended to be processed through the Platform unless your organization configures such use; your organization must establish an appropriate legal basis.

• Provide, operate, and personalize the Website and Platform.
• Authenticate users (including magic links) and enforce tenant isolation.
• Process subscriptions, work budgets, and usage metering.
• Send transactional email (invitations, sign-in links, security alerts, billing).
• Provide customer support and respond to inquiries.
• Monitor, detect, and prevent fraud, abuse, and security incidents.
• Analyze aggregated usage to improve reliability and product design.
• Comply with law and establish, exercise, or defend legal claims.
• Send product updates and marketing where permitted; you may opt out of marketing email.

AI features process prompts and Customer Data you submit to generate AI Output. Processing may involve third-party model providers under contractual safeguards. We configure AI employees according to your Tenant permissions and work budgets.

We do not use your Tenant Customer Data to train public foundation models unless you explicitly opt in to a feature that says otherwise or we agree in writing. We may use de-identified or aggregated telemetry to improve reliability and safety.

Automated decisions with legal or similarly significant effects are not a core purpose of the Platform. If we introduce such features, we will describe them and provide controls required by law.

We do not sell personal data. We share data only as needed to operate the service, with:

• Infrastructure and hosting providers (for example Google Cloud in EU regions).
• Email delivery providers (for example Resend) for transactional messages.
• AI inference providers (for example OpenAI, Anthropic, or Google) when your Tenant uses those features and you or your admin supplied or authorized keys or routing.
• Payment processors for subscriptions.
• Professional advisers (legal, accounting) under confidentiality.
• Authorities when required by law or to protect rights and safety.
• Successors in a merger, acquisition, or asset sale, subject to this policy.

Subprocessors are bound by data protection terms. An overview is available on request at privacy@agentzi.com. We will notify enterprise customers of material subprocessor changes where contractually required.

We primarily store and process data in the European Economic Area (EEA), with a focus on EU hosting regions. If personal data is transferred outside the EEA, we use appropriate safeguards such as Standard Contractual Clauses approved by the European Commission and supplementary measures where needed.

Some AI or support providers may process data in the United States or other countries. Where you enable those integrations, transfers occur under their terms and our vendor agreements.

We apply measures such as encryption in transit, access control, tenant isolation, logging, and least-privilege database roles. No system is perfectly secure. You must protect Account credentials and report suspected incidents to privacy@agentzi.com.

We retain personal data only as long as needed for the purposes described, including:

• Account and Tenant data: for the life of the Subscription and a reasonable period afterward for export, dispute resolution, and backup rotation.
• Billing records: as required by tax and commercial law (typically up to seven years where applicable).
• Security logs: for a limited period aligned with incident investigation needs.
• Marketing suppression lists: until you opt back in or we no longer need the record.

We may anonymize data for statistics and delete or aggregate identifiers when retention ends.

Where GDPR or similar laws apply, you may have the right to access, rectify, erase, restrict processing, object to processing based on legitimate interests, data portability, and withdraw consent. You may also lodge a complaint with a supervisory authority.

For Platform data controlled by your employer, contact your organization administrator first. We will assist them as processor where applicable.

To exercise rights against Agentzi as controller, email privacy@agentzi.com. We may verify your identity before responding. We aim to respond within one month, extendable where permitted.

Supervisory authority in the Netherlands: Autoriteit Persoonsgegevens (Dutch Data Protection Authority) (https://autoriteitpersoonsgegevens.nl).

Our services are not directed at children under 16. We do not knowingly collect personal data from children. Contact us if you believe we have collected such data.

With consent or where permitted for B2B legitimate interest, we may send emails about Agentzi. Every marketing email includes an unsubscribe link. Transactional messages (sign-in, security, billing) are not marketing and may still be sent when you use the service.

See our Cookie Policy for details on cookies, local storage, and consent choices on the Website and Platform.

Agentzi B.V.
Privacy: privacy@agentzi.com
General: hello@agentzi.com