Privacy Policy
Draft for legal review. Version 2026-10-22. Items in [brackets] must be completed before launch.
Who we are
Agentik is operated by [Company legal name], [registered address], [registration number] ("Agentik", "we"). Contact for privacy questions: [privacy@agentik.example]. [EU representative under Article 27 GDPR, if required: name and address.]
Two roles
- Controller. We decide how we use the data of people who use Agentik itself: account holders, their team members, billing contacts and visitors of agentik's own website. This policy covers that data.
- Processor. When a business installs an Agentik chat agent on its own website, that business is the controller for the data of its website visitors. We process those visitors' messages and contact details only on the business's instructions, under our Data Processing Agreement. Visitors should read the privacy policy of the business whose website they are on.
What we collect as controller
- Account data: name, email address, password hash or Google sign-in identifier, organization name, role.
- Billing data: billing email, plan, invoices. Card data is handled by our payment provider; we never see full card numbers.
- Usage data: which features you use, AI usage counts and costs, technical logs (IP address, browser, timestamps) kept for security and operations.
- Support data: what you write to the Agentik Assistant or to support, with a summary of your account state at that moment.
- The website address you enter for a free preview, and the public pages we read from it.
Why we use it (legal bases)
- To provide the service you signed up for (contract, Art. 6(1)(b)).
- To bill you and keep records we are required to keep (legal obligation, Art. 6(1)(c)).
- To keep the service secure, prevent abuse and improve it (legitimate interests, Art. 6(1)(f)).
- Product emails you can opt out of (consent or legitimate interests, as applicable). [Confirm per channel.]
AI processing
Questions sent to an agent, the relevant parts of the business's knowledge and a short conversation history are sent to our AI provider to generate an answer. We send only what the answer needs. We do not use customer conversations to train our own models, and our AI provider does not use API data to train its models. [Confirm current provider terms and retention period.]
Who receives data
Our subprocessors (hosting, database, AI, rendering of public web pages, payments, email) process data on our behalf: see the Subprocessor List. We do not sell personal data.
International transfers
Our database is hosted in the EU (Frankfurt). Some providers process data outside the EU/EEA, in particular our AI provider in the United States. Such transfers rely on [the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses]. [Confirm per provider.]
How long we keep data
See the Data Retention, Deletion and Export policy. In short: account data while your account exists and for 30 days after deletion; invoices as long as tax law requires; the Agentik Assistant's conversations 90 days; technical logs [30 days].
Your rights
You can access, correct, export or delete your data, restrict or object to processing, and withdraw consent. Most of this is self-service in Settings & Billing and Settings → Privacy & data. Otherwise write to [privacy@agentik.example]. You can complain to a supervisory authority, in particular in your EU member state of residence.
Cookies
We use only strictly necessary cookies and local storage for your preferences. See the Cookie Policy.
Changes
We will tell you about material changes before they take effect, and ask you to accept them where required.