Privacy Policy

We at Agentive respect your privacy and are committed to protecting your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your data when you visit our website, use our services, or otherwise interact with us. By accessing or using Agentive's offerings, you agree to the practices outlined below.

1. Information We Collect

1.1 Personal Information

We may collect the following types of personal data when you interact with us:

• Contact details: Name, email address, phone number, postal address
• Account credentials: Username, password
• Professional details: Company name, job title
• Billing information: Payment method, invoicing details
• Preferences: Communication and marketing preferences
• Usage data: Dates, times, and pages visited on our site; feature usage metrics

1.2 Social Media Data

If you choose to log in via a social network, we may receive:

• Your social profile name and picture
• Unique social network ID
• Any other information you grant us permission to access

2. How We Collect Information

• Direct Interactions: Web forms, live chat, email, and phone communications
• Automated Technologies: Cookies, web beacons, tracking pixels, server logs
• Third-Party Integrations: Google Analytics, payment processors
• Public Sources: Information available in public records or directories

3. Purposes of Processing

We use your information to:

• Deliver, maintain, and improve our services
• Process payments and manage your account
• Respond to enquiries and provide customer support
• Conduct fraud prevention and security checks
• Comply with legal, regulatory, and contractual obligations
• Analyse usage trends to enhance user experience

4. Data Security and Storage

We implement industry-standard safeguards, including:

• Encryption of data in transit (TLS) and at rest
• Secure servers and data centres with restricted physical access
• Regular vulnerability assessments and security audits
• Employee training on privacy best practices

5. Disclosure of Your Information

We may share your personal data with:

• Service Providers: Hosting, payment processing, analytics partners
• Social Networks: In accordance with their platform policies
• Legal Authorities: When required by law, regulation, or court order
• With Your Consent: Any other third parties you explicitly approve

We do not sell or rent your personal information for third-party marketing.

6. Data Residency and International Transfers

For Agentive AI Employee customers, your operational data at rest, including your MyAgentive instance, agent memory, conversations, files and backups, is stored in Australia on Amazon Web Services (AWS) in the Sydney (ap-southeast-2) or Melbourne (ap-southeast-4) region. AI inference is normally performed in Australia using AWS Bedrock.

Some data may be processed outside Australia in the following limited circumstances:

• In transit: traffic may pass through Cloudflare's global edge network for TLS termination, DDoS protection and delivery. Cloudflare does not store the content of your requests at rest as part of this transit path.
• Optional features: certain features you choose to enable (such as Telegram messaging, voice synthesis, SMS or outbound calling) transmit data to providers outside Australia. These are engaged only if you turn them on.
• Regional failover: if AWS cannot provide sufficient AI compute capacity in Australia, we may temporarily route AI inference to another AWS region outside Australia. Your data at rest remains in Australia, and our no-training and no-persistence commitments continue to apply.

Where data is processed outside Australia, we rely on appropriate contractual safeguards and technical measures to protect it. The providers we use are listed in section 14 (Sub-processors).

7. Your Rights

Subject to applicable law, you may:

• Access the personal data we hold about you
• Correct inaccuracies or update information
• Request deletion of your data where lawful
• Object to or restrict certain processing activities
• Withdraw consent at any time for processing you previously agreed to
• Opt-out of marketing communications

To exercise these rights, please contact us via the details below.

8. Data Retention

We retain your personal information only as long as necessary to:

• Fulfil the purposes described in this Policy
• Comply with legal, tax, and accounting obligations
• Resolve disputes and enforce our agreements

When retention is no longer required, we will securely delete or anonymise your data.

Export on termination. If your service is terminated, you may request an export of your data within 15 days of termination, and we will provide it in a standard machine-readable format (such as CSV, Markdown or JSON) at no additional cost. We retain your data for at least 30 days after termination, after which it may be deleted.

9. Data Breach Notification

We comply with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth). In the event of an Eligible Data Breach, we will:

1. Notify affected individuals as soon as practicable
2. Notify the Office of the Australian Information Commissioner (OAIC) where required, and any affected customer without undue delay
3. Provide guidance to help you mitigate potential harm
4. Take immediate steps to contain and remediate the breach

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements.

• Significant updates will be posted with a revised "Effective Date."
• We may notify you by email or in-service announcement if changes materially affect your rights.

Please review this page periodically.

11. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Analyse site usage and performance
• Personalise content and remember your preferences
• Enhance site functionality and security

You can manage or disable cookies through your browser settings.

13. Application Telemetry

We collect controlled, anonymised application telemetry about how the Services operate and perform, such as feature usage counts, integration error events, latency and performance metrics, and anonymised error logs. This telemetry is aggregated and anonymised on your instance before it is sent to our central management infrastructure. It does not include your operational data, the content of your conversations or tasks, the names or contents of your files, or any personal information. We use telemetry to troubleshoot, support, secure, benchmark and improve the Services.

14. Sub-processors

We engage the following third-party sub-processors to deliver the Services. We may add, replace or remove sub-processors from time to time, and will give at least 30 days' notice of material changes via email or in-product notification.

Always in Australia

May route outside Australia in normal operation

Engaged only if you enable the relevant feature