Privacy Policy

Agentas (referred to as “Agentas,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you visit https://agentas.dev, contact us, use our services, or connect a third-party account to an Agentas integration.

1. Who We Are

Agentas provides artificial-intelligence automation, business-process automation, customer-support systems, CRM integrations, and related consulting services.

Data controller: Agentas Tech SRL
Business location: Chișinău, Moldova
Privacy contact: nick@agentas.dev
Website: https://agentas.dev

2. Scope of This Policy

This Policy applies to:

• visitors to the Agentas website;
• people who contact us or request information, proposals, consultations, or services;
• clients and prospective clients;
• authorized users of integrations that we configure or operate; and
• personal information processed directly by Agentas for its own business purposes.

When Agentas processes personal information solely on a client’s documented instructions, that client may be the data controller and Agentas may act as a processor or service provider. The relevant service agreement or data-processing agreement will govern that processing.

3. Information We Collect

Depending on how you interact with us, we may collect the following categories of information.

3.1 Information You Provide

This may include:

• your name, email address, telephone number, company, and job title;
• information submitted through contact, booking, or inquiry forms;
• messages, attachments, project requirements, and consultation notes;
• account, billing, and transaction information where applicable; and
• information you choose to provide while using an Agentas service or automation.

Please do not provide sensitive personal information unless it is necessary for an agreed service and appropriate safeguards have been established.

3.2 Client and Project Data

When providing automation or integration services, we may process information supplied by a client or accessed through systems authorized by that client. The categories of data depend on the specific project and may include customer records, communications, workflow data, CRM records, appointment information, and operational data.

We use client and project data only to provide, secure, maintain, troubleshoot, and improve the contracted service, or as otherwise instructed or permitted by the client and applicable law.

3.3 Google Account and Google Calendar Data

If you explicitly connect a Google account to an Agentas integration, the integration may request access to Google Calendar information within the permissions shown on Google’s consent screen. Depending on the feature you authorize, this information may include:

• calendar names and identifiers;
• event titles;
• event dates, start times, and end times;
• event descriptions;
• event locations;
• attendee information; and
• event status and related metadata.

For Hermes Calendar by Agentas, our Google Calendar–to–Obsidian integration, Google Calendar data is used only to retrieve authorized calendar events and place appointment information into the authorized user’s private planning notes, and to create, edit, or delete Calendar events when the user explicitly requests it through an authorized Hermes interface. The scheduled synchronization only reads from Google Calendar and never modifies it. The integration does not use Google Calendar data for advertising, profiling, or unrelated purposes.

Google OAuth credentials and refresh tokens are stored in the environment where the user or system administrator installs the integration. They are used only to maintain the connection authorized by the user.

Our use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements:

https://developers.google.com/terms/api-services-user-data-policy

3.4 Website and Technical Information

When you visit the website, our hosting or security providers may automatically record limited technical information such as:

• IP address;
• browser and device type;
• operating system;
• requested pages and referring page;
• date and time of access; and
• security and error logs.

We use this information to deliver the website, maintain security, prevent abuse, diagnose technical problems, and understand basic website performance.

3.5 Cookies and Similar Technologies

We use cookies and similar technologies on this website, including a Google Ads tag that measures whether visits from our advertising lead to enquiries. That tag loads only if you accept it in our cookie banner. Our Cookie Policy lists each cookie, what it does, how long it lasts, and how to control or refuse it.

4. How We Use Information

We may use personal information to:

• respond to inquiries and communicate with you;
• assess project requirements and prepare proposals;
• provide, configure, maintain, and support our services;
• operate authorized integrations and automations;
• authenticate users and maintain account security;
• process payments and administer contracts;
• troubleshoot errors and protect against fraud, abuse, and unauthorized access;
• comply with legal, tax, accounting, and regulatory obligations;
• establish, exercise, or defend legal claims; and
• improve our website and services using appropriately limited information.

We do not sell personal information. We do not use Google user data for advertising, and we do not permit humans to read Google user data except when the user has provided explicit permission for support or security purposes, when necessary to investigate abuse, or when required by law.

5. Legal Bases for Processing

Where the General Data Protection Regulation or similar law applies, we rely on one or more of the following legal bases:

• Consent: when you give us specific permission, including when you authorize an integration;
• Contract: when processing is necessary to enter into or perform a contract with you;
• Legitimate interests: when necessary to operate, secure, and improve our business and services, provided those interests are not overridden by your rights;
• Legal obligation: when processing is required by applicable law; and
• Legal claims: when necessary to establish, exercise, or defend legal rights.

You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

6. How We Share Information

We may disclose personal information only as reasonably necessary to:

• hosting, infrastructure, security, communications, payment, or professional-service providers acting on our behalf;
• contractors who are bound by confidentiality and data-protection obligations;
• a client that controls the relevant project data;
• public authorities or other parties when required by law or necessary to protect rights, safety, and security; or
• a buyer, successor, or adviser involved in a legitimate corporate transaction, subject to appropriate safeguards.

We require service providers to process information only for authorized purposes and to apply appropriate safeguards. We do not sell or rent personal information, and we do not share Google user data with data brokers or advertising platforms.

7. International Data Transfers

Some service providers may process information in countries other than the country where you live. Where required, we use appropriate safeguards for international transfers, such as contractual protections, adequacy decisions, or another legally recognized transfer mechanism.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide services, maintain security, comply with legal obligations, resolve disputes, and enforce agreements.

Retention periods vary according to the type of information and the relevant relationship. Unless a longer period is required by law or contract:

• inquiry and prospect information is reviewed periodically and deleted when no longer needed;
• client and project information is retained for the service period and a reasonable period afterward;
• technical and security logs are retained only as long as necessary for operations and security; and
• Google Calendar data copied by an authorized integration remains in the user-controlled destination until the user deletes it or requests deletion where Agentas controls that destination.

OAuth access tokens and refresh tokens are deleted or invalidated when the integration is disconnected, access is revoked, or the credentials are no longer required.

9. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. Measures may include access controls, authentication, encryption in transit, restricted credentials, system updates, backups, and logging appropriate to the service.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we will take reasonable steps to investigate and respond to suspected incidents.

10. Your Rights and Choices

Depending on your location and applicable law, you may have the right to:

• request access to your personal information;
• request correction of inaccurate information;
• request deletion of information;
• restrict or object to certain processing;
• receive certain information in a portable format;
• withdraw consent; and
• complain to an appropriate data-protection authority.

To exercise a privacy right, contact nick@agentas.dev. We may need to verify your identity before completing a request.

Disconnecting Google Access

You may revoke Agentas access to your Google account at any time through your Google Account’s third-party connections page:

https://myaccount.google.com/connections

Revoking access stops future API access. Information previously copied to a user-controlled destination, such as private Obsidian notes, must also be deleted from that destination if the user wants those copies removed.

11. Children’s Privacy

Our website and services are intended for businesses and adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, contact us so that we can investigate and delete it where appropriate.

12. Third-Party Services and Links

Our website or services may link to or integrate with third-party services. Their privacy practices are governed by their own policies. We are not responsible for third-party websites or services that we do not control.

13. Changes to This Policy

We may update this Privacy Policy to reflect changes to our services, legal requirements, or data practices. We will post the updated version at this URL and revise the “Last updated” date. If a change materially affects how we use information, we will provide additional notice where required.

14. Contact Us

For privacy questions, requests, or complaints, contact:

Agentas / Agentas Tech SRL
Email: nick@agentas.dev
Location: Chișinău, Moldova
Website: https://agentas.dev