What we collect, and what we do with it.

Account details you give us: your name, email address, organisation name and password. Passwords are stored only as a hash — we cannot read yours.

Content you upload: the documents, text and links you add to your knowledge base, and the settings you give your agents.

Conversations: messages exchanged between your customers and your agents, along with the channel they came from and the contact details your agent captures.

Connection credentials: the API keys and tokens you add to connect Instagram or WhatsApp. These are encrypted before they are stored and shown masked afterwards.

Technical records: IP address, browser type and timestamps, kept to keep accounts secure and to investigate abuse.

To run the service: generating replies, searching your knowledge base, delivering messages on your channels and showing you your inbox and analytics.

To keep accounts secure: verifying email addresses, rate limiting, and locking accounts after repeated failed sign-ins.

To bill you, on paid plans.

To contact you about the service — verification codes, password resets and material changes. We do not sell your data or use it for advertising.

Documents you upload are indexed for your organisation alone. They are not shared with other accounts and are not used to train a general model.

Every record is scoped to your organisation, and requests are checked against that scope before anything is returned.

Instagram and WhatsApp receive the messages your agent sends through them, and their own privacy terms apply to that delivery.

Our infrastructure providers host the databases and servers the service runs on.

Payment processors handle card details on paid plans. We never see or store your full card number.

Email delivery providers send verification and password reset messages.

These providers act on our instructions and may not use your data for their own purposes.

Account and conversation data is kept while your account is open.

If you delete your account, we remove your content within 30 days, except where we are required to keep records for legal or accounting reasons.

You can delete individual documents, contacts and conversations at any time from the dashboard, and that removal is immediate.

You can ask for a copy of your data, correct it, or have it deleted. You can also export your contacts and conversations yourself from the dashboard.

To make a request, write to us at the address below. We respond within 30 days.

Traffic is encrypted in transit over HTTPS. Stored credentials are encrypted at rest. Passwords are hashed with bcrypt.

Access to production systems is limited to the people who need it, and administrative actions are logged.

No system is perfect. If we discover a breach affecting your data, we will tell you.

We set a cookie to keep you signed in. It is required for the dashboard to work and is not used for tracking or advertising.

If we change this policy in a way that affects you, we will email you before it takes effect. The date at the top always reflects the current version.

Questions about this policy, or a request about your data: privacy@agentrix.live