AgilityOS / Privacy Policy
Privacy Policy
Last updated: March 15, 2026
This policy applies to all users of the AgilityOS platform and related services provided by Agility Automations, Inc..
1. Introduction
Agility Automations, Inc. ("Agility OS," "we," "us," or "our") operates the Agility OS platform and related services accessible at agilityos.ai (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you access or use the Service.
By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please do not use the Service.
2. Information We Collect
2.1 Information You Provide Directly
- Account registration data: name, email address, password, company name, job title, and billing information.
- Profile and configuration data: preferences, AI agent settings, custom instructions, and uploaded files.
- Communications: messages, support tickets, feedback, and any other content you submit to us.
- Payment information: processed by our payment processor (Stripe); we do not store full card numbers.
2.2 Information Collected Automatically
- Log data: IP address, browser type and version, operating system, referring URL, pages viewed, and timestamps.
- Device identifiers: hardware model, unique device IDs, and mobile network information.
- Usage data: features used, clicks, navigation paths, session duration, and error reports.
- Cookies and similar technologies: session tokens, preference cookies, and analytics identifiers (see Section 7).
2.3 AI Agent and Conversation Data
When you interact with AI agents powered by the Service, conversation transcripts, inputs, outputs, voice recordings (if applicable), and associated metadata are collected and processed. This data is used to provide the Service, improve model accuracy, and generate analytics.
2.4 Third-Party Sources
We may receive information about you from third-party integrations you authorize (e.g., Google Calendar, CRM platforms), social login providers, and marketing partners, consistent with their privacy policies.
2.5 User-Generated Content
Content you create, upload, or share via the Service — including documents, images, scripts, prompts, and agent configurations — is stored and processed to provide the Service. You are solely responsible for the content you submit.
3. Legal Bases for Processing (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:
- Performance of a contract: Processing necessary to deliver the Service you have subscribed to.
- Legitimate interests: Fraud prevention, security, improving our products, and direct marketing to existing customers.
- Consent: Where you have given explicit consent, such as for optional marketing emails or analytics cookies.
- Legal obligation: Compliance with applicable laws and responding to lawful government requests.
You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
4. How We Use Your Information
We use personal information to:
- Provide, operate, maintain, and improve the Service.
- Create and manage your account and process transactions.
- Respond to inquiries, provide support, and send operational communications.
- Personalize your experience and deliver AI-generated content relevant to your use case.
- Send marketing communications (where you have opted in or where permitted by law).
- Monitor for suspicious activity, enforce our Terms of Service, and prevent fraud.
- Comply with legal obligations and respond to lawful requests from authorities.
- Conduct analytics and research to understand how users interact with the Service.
- Train and improve AI models, using only de-identified or aggregated data unless you have separately consented.
6. Data Retention
We retain personal data for as long as your account is active or as needed to provide the Service. Specifically:
- Account data: Retained for the duration of your account and up to 90 days after account deletion.
- Conversation and AI interaction data: Retained for up to 12 months unless you request earlier deletion.
- Billing records: Retained for 7 years to meet financial reporting obligations.
- Log data: Retained for up to 12 months for security and debugging purposes.
- Backup copies: May be retained for up to 30 additional days after deletion from production systems.
You may request deletion of your personal data at any time by contacting support@agilityautomations.com. We will action deletion requests within 30 days, subject to legal retention obligations.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- TLS 1.2+ encryption for all data in transit.
- AES-256-GCM encryption for sensitive credentials and API keys at rest.
- Role-based access controls limiting employee access to personal data.
- Regular security assessments and vulnerability scanning.
- Incident response procedures for data breach notification.
Despite our safeguards, no transmission over the internet or electronic storage is 100% secure. In the event of a data breach affecting your rights, we will notify you as required by applicable law.
9. International Data Transfers
The Service is operated from the United States. If you access the Service from outside the U.S., your information may be transferred to and processed in the U.S. or other countries where our service providers operate.
For transfers of personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission, or other lawful transfer mechanisms. You may request a copy of applicable transfer safeguards by contacting us.
10. Your Rights and Choices
10.1 All Users
Regardless of your location, you may:
- Access and update your account information through your account settings.
- Opt out of marketing emails by clicking "unsubscribe" in any marketing email.
- Request deletion of your account and associated data.
10.2 EEA, UK, and Swiss Residents (GDPR)
You have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data ("right to be forgotten"), subject to legal exceptions.
- Restrict or object to certain processing activities.
- Data portability: receive your data in a structured, machine-readable format.
- Withdraw consent at any time where processing is based on consent.
- Lodge a complaint with your local data protection authority.
To exercise these rights, contact support@agilityautomations.com. We will respond within 30 days (or within any shorter period required by applicable law).
10.3 California Residents (CCPA / CPRA)
California residents have the right to:
- Know what personal information we collect, use, disclose, and sell.
- Delete personal information we have collected (subject to exceptions).
- Opt out of the sale or sharing of personal information (we do not sell personal data).
- Non-discrimination for exercising your privacy rights.
- Correct inaccurate personal information.
- Limit use and disclosure of sensitive personal information.
To submit a verifiable consumer request, contact support@agilityautomations.com or call us at the number listed on our Contact page. We will respond within 45 days.
10.4 Other State Residents
Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), and other states with applicable privacy laws may have similar rights under their respective laws. Contact us at support@agilityautomations.com to exercise any applicable rights.
11. Children's Privacy
The Service is not directed to individuals under the age of 16 (or 18 in jurisdictions where the minimum age is 18). We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information without parental consent, please contact us at support@agilityautomations.com. We will take steps to remove that information and terminate the child's account promptly.
12. Third-Party Links and Integrations
The Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you access through the Service.
13. Automated Decision-Making
The Service uses automated processing to generate AI-driven recommendations and insights. These outputs are informational and are not used to make legally significant automated decisions about you without human involvement. If you believe an automated process has negatively affected you, please contact us to request a human review.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy on this page with a revised "Last updated" date.
- Sending an email notification to the address associated with your account.
- Displaying a prominent notice within the Service.
Your continued use of the Service after the effective date of any update constitutes your acceptance of the revised policy.
15. Contact Us
For privacy-related questions, requests, or complaints:
Agility Automations, Inc.
Attn: Privacy Team
Email: support@agilityautomations.com
Website: agilityos.ai/contact
For EEA/UK users: If we do not resolve your complaint, you may lodge a complaint with your local supervisory authority (e.g., the UK ICO or relevant EU data protection authority).