Privacy Policy

• Controller. For the data of our account holders and their team members (account, workspace, billing and usage data), and for visitors of our website, Agentaria is the data controller.
• Processor. For the messages, contacts and other content that our customers process through the Service about their own customers (“Customer Data”), Agentaria acts as a processor on behalf of the customer, who is the controller. If you are a customer of a business that uses Agentaria, please contact that business first to exercise your rights; we will assist it.

• Account data: name, email address, password (stored only as a hash), language, profile picture if provided, and role within a workspace.
• Workspace data: workspace name and settings, team members, connected WhatsApp numbers and connection settings, automations, AI agent configuration and knowledge documents you upload.
• Messages and contacts (Customer Data): WhatsApp messages sent and received through the Service, attachments, contact names and phone numbers, CRM notes and appointments.
• Billing data: plan, orders, invoices and payment status. Card details are entered on the payment provider's pages and are not stored by Agentaria.
• Technical data: IP address, browser and device information, log and security events, and the cookies described in section 11.

Facebook Login

If you choose to sign in with Facebook (“Facebook Login”, app name “Agentaria Login”), we request only the public_profile and email permissions and receive only: your Facebook user ID (app-scoped), your name, your email address and your public profile picture. We use them solely to create and sign in to your Agentaria account. Facebook Login does not give us any permission on Facebook Pages or Messenger: we do not post to Facebook, and we do not access your friends list, your Pages or your Facebook messages.

Sign in with Google

If you choose “Continue with Google”, we request only the openid, email and profile scopes and receive your Google account identifier, email address, name and profile picture. We use them solely to create and sign in to your Agentaria account. Signing in with Google does not give us access to your Google Calendar or Google Sheets.

Google Calendar and Google Sheets integrations (optional)

Separately from sign-in, a workspace can choose to connect a Google account to use the appointment and automation features. Only in that case do we request the following scopes:

Google API Services: Limited Use

Agentaria's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the feature you requested. It is not sold, not used for advertising, and not used to develop, improve or train generalized AI or machine-learning models. Our staff do not read it unless you ask us to (for example for support), it is necessary for security or abuse investigations, or the law requires it. If you configure an automation that passes Google data to an AI step, that data is sent to the AI service provider only to generate the output you requested.

We share personal data only with service providers that help us run the Service, and only to the extent needed for the feature concerned:

• Hostinger: hosting of the Service and sending of transactional email.
• Payment provider: payments are processed by the payment provider made available to you at checkout (for example Stripe).
• Meta Platforms: WhatsApp Business Platform (Cloud API) to send and receive WhatsApp messages, and Facebook Login if you use it.
• Google: sign in with Google, Google Calendar and Google Sheets, only if you use them.
• AI service providers: when you use an AI feature, the content needed for that feature (for example a conversation excerpt and your agent's instructions) is sent to the AI service provider used to generate the response. Depending on the configuration of the Service and of your workspace, this may be an AI routing service (such as OpenRouter) and the model provider it routes the request to, or a model provider connected directly. If your workspace uses its own AI provider key, the request is sent to the provider you chose. The current list of AI providers in use is available on request at privacy@agentaria.cloud.

We may also disclose data when required by law or to protect rights and safety, or as part of a merger or acquisition subject to this Policy. We do not sell personal data, and we do not share it for cross-context behavioural advertising.

Our service providers may process personal data in countries other than your own, including outside the European Economic Area. When personal data from the European Economic Area, the United Kingdom or Switzerland is transferred to a country that does not offer an adequate level of protection, we rely on the European Commission's Standard Contractual Clauses (or the applicable UK/Swiss equivalent) or another lawful transfer mechanism. Transfers of data from Morocco are made in accordance with Law 09-08.

• Account, workspace and Customer Data are kept while your account is active.
• The Service offers export features for some data (for example contacts and certain reports). A complete export of all workspace data is not currently available. If you need a copy of your data, use those features before closing your account or contact us.
• When you close your account or ask us to delete your data, our team processes the request and deletes or anonymises the personal data concerned, with a target of 30 days. This is a processing time handled by our team, not an automatic function of the platform.
• We keep data we are legally required to keep (such as invoices and accounting records) for the period required by law, and data needed to establish or defend legal claims.
• Residual copies may remain in backups until they are replaced in the ordinary backup cycle.

Depending on where you live, you have the right to access, rectify, erase and port your data, to object to or restrict certain processing, and to withdraw your consent at any time (without affecting prior processing). We respond within 30 days.

• EEA, UK and Switzerland (GDPR): the rights listed above, including the right to object to processing based on legitimate interests.
• California (CCPA/CPRA): the right to know what personal information we collect, use and disclose; to delete it; to correct it; and not to be discriminated against for exercising these rights. Do Not Sell or Share: we do not sell or share personal information as defined by the CCPA, so there is nothing to opt out of; you can nevertheless contact us at any time. You may use an authorised agent; we will verify the request.
• Morocco (Law 09-08): the rights of access, rectification and opposition. The supervisory authority is the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel).

To exercise your rights, email privacy@agentaria.cloud from the address linked to your account. We may ask you to verify your identity. To delete your data, email privacy@agentaria.cloud with the subject “Delete my data”.

You may lodge a complaint with your local data protection authority: in the EU, the supervisory authority of your country of residence or work; in the UK, the ICO; in Morocco, the CNDP; in California, the California Privacy Protection Agency. We encourage you to contact us first.

We use encryption in transit (TLS), store passwords only as hashes, restrict access to personal data to authorised personnel on a need-to-know basis and keep security logs. No system is completely secure; we will notify you and the competent authorities of a personal data breach where the law requires it.

The Service is intended for persons aged 18 or older. We do not knowingly collect data from minors. If you believe a minor has created an account, please contact us.

On agentaria.cloud we use only the following cookies: agentaria-session (session and sign-in, 2 hours, renewed while you use the site), XSRF-TOKEN (protection against cross-site request forgery, 2 hours), wadesk_cookie_consent (remembers your cookie choice, 1 year) and wadesk_ref (referral code, only when you arrive through a referral link, 30 days). No analytics or advertising tool is loaded at this time. Some pages load resources from cdn.tailwindcss.com and Google Fonts, which receive your IP address. Meta, Google and the payment provider apply their own cookies on their own pages when you use them.

We may update this Policy. We will post the new version here with its date and, for material changes, inform account holders by email or in the Service.

Privacy questions: privacy@agentaria.cloud. Other legal questions: legal@agentaria.cloud.