Privacy Policy

Agenthos ("Agenthos", "we", "us", "our") designs and builds AI systems, automation workflows and custom software for startups and growing businesses. This Privacy Policy explains what personal data we collect when you visit agenthos.ai (the "Site"), contact us or work with us, and what we do with it.

It applies to the Site, to the contact form on it, and to the enquiry, discovery-call and sales process that follows. Where we build or run systems for a client, we usually process personal data on that client's behalf under a separate written agreement. Section 9 explains how that works.

We have written this policy to meet the EU and UK General Data Protection Regulation (GDPR) and comparable laws elsewhere. Where a local law gives you more rights than this policy describes, that law applies.

We keep collection to a minimum. The Site has no user accounts, no login, no payment flow and no advertising or analytics tracking. The data we hold about you comes from three sources.

Data you give us through the contact form. The form asks for:

• the topic you want help with, chosen from a short list (for example "AI Automation" or "General inquiry");
• your first name and last name;
• your email address;
• your phone number (optional);
• a free-text message describing what you would like to automate (optional). This may include details about your business, your tools and your workflows.

Data you give us afterwards. If we go on to exchange emails, hold a discovery call or start a project, we will hold whatever you choose to share: your job title and company, meeting notes, documents, screenshots of workflows, sample data and access to the tools you want connected.

Data collected automatically. Like every website, the Site is served by web servers that keep standard request logs: your IP address, browser and device type, the pages you request, the time of each request, the referring page and any error diagnostics. Our hosting provider keeps these logs for security, capacity and troubleshooting. We do not combine them with your contact details and we do not use them to profile you.

We do not deliberately collect special categories of data (such as health, religious or political information) and ask you not to send any through the form.

We do not sell personal data, and we do not share it with data brokers or advertising networks. We do not use personal data submitted through the Site to train AI or machine-learning models.

Where we rely on legitimate interests we have checked that those interests are not overridden by your rights. You can object at any time (see section 11).

When you press the submit button, the form is sent to our web server. The server turns it into an email and delivers it to our team inbox through Resend, a transactional email delivery service. The email contains exactly what you typed: the topic you chose, your name, email address, phone number and message. Your email address is set as the reply-to address so we can answer you directly.

The Site does not store your submission in a database. It lives in our email system and, for a limited period, in Resend's delivery logs, which Resend keeps to deliver and troubleshoot email.

Submitting the form does not create an account, subscribe you to a newsletter or commit you to anything. What the Site says about a free audit, a reply within one business day and a discovery call describes what we aim to do, not a contractual promise.

The Site does not use cookies for tracking, advertising or analytics, and it does not load third-party tracking scripts, pixels or social-media plugins.

Your browser may keep one setting in local storage: your light or dark theme preference, stored under the key "theme". It stays on your device, is never sent to us and can be cleared through your browser settings. Because it only exists to remember a choice you made, it does not need a consent banner.

If we add analytics or other non-essential cookies in future, we will update this policy and, where the law requires it, ask for your consent first.

We share personal data only with the service providers we need to run the Site and our business. Each is bound by a contract that limits what it may do with the data. At the date of this policy they are:

• Resend (Resend, Inc., United States), which delivers the email generated by the contact form.
• Our hosting provider, which hosts the Site, serves its pages and keeps server logs for security and reliability.
• Our email, calendar, video-conferencing and document tools, which we use to correspond with you, hold discovery calls and share documents.
• Professional advisers (such as accountants or lawyers) where needed, and public authorities where the law requires it.

If we sell, merge or restructure the business, personal data may pass to the successor, who will be bound by this policy.

Some of our providers store data outside the country where you live, including in the United States. Where data leaves the European Economic Area or the United Kingdom, we rely on an adequacy decision, the EU Standard Contractual Clauses or the UK International Data Transfer Addendum, together with the provider's own technical safeguards. You can ask us for details of the safeguards that apply to a particular transfer.

When data is no longer needed we delete it, or anonymise it so that it can no longer identify you.

When we build, integrate or run automations for a client, those systems often handle personal data belonging to the client's own customers, staff or leads: CRM records, email threads, call transcripts, support tickets and similar. In that situation the client is the controller and Agenthos is a processor acting on documented instructions. We commit to the following:

• We access and use that data only to deliver the agreed work.
• We put a written data processing agreement in place when the law requires one. It covers security measures, sub-processors, breach notification and what happens to the data at the end of the project.
• We use only the AI model providers and other sub-processors that the client has approved, and we favour configurations in which the provider does not retain or train on the client's data.
• Access is limited to the people who need it. Credentials the client gives us are stored securely and revoked when the work ends.
• On completion we return or delete the client's data as instructed, unless the law requires us to keep a copy.

Questions about how a client's system handles your data should go to that client. This policy does not replace the client's own privacy notice.

The Site and the contact form are served over HTTPS, so your submission is encrypted in transit. Access to enquiry data is limited to the people who handle it, the accounts that hold it are protected by strong authentication, and we choose providers with recognised security certifications.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your data, we will tell you and the relevant authority where the law requires it.

Depending on where you live, you may have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate or incomplete data corrected;
• have your data erased;
• restrict how we use your data;
• receive the data you gave us in a portable format;
• object to processing based on legitimate interests, and object to direct marketing at any time;
• withdraw consent where we rely on it, without affecting processing that happened before;
• not be subject to a decision based solely on automated processing that has legal or similarly significant effects on you;
• lodge a complaint with a data protection authority, for example the authority in the EU country where you live or the UK Information Commissioner's Office.

To exercise any of these rights, email admin@agenthos.ai. We may ask you to confirm your identity. We respond within one month, or tell you if a complex request needs longer. We do not charge for this unless a request is clearly unfounded or excessive.

We do not make decisions about you based solely on automated processing, and we do not profile visitors to the Site.

If you live in California or another US state with a consumer privacy law: we do not sell personal information and do not share it for cross-context behavioural advertising. You can use the same email address to exercise your rights to know, delete and correct.

The Site and our services are for businesses and are not directed at children under 16. We do not knowingly collect data from children. If you believe a child has sent us personal data, contact us and we will delete it.

The Site links to our clients' websites and to other third-party sites. Those sites have their own privacy practices, which we do not control. Check their policies before sharing data with them.

We may update this policy as the Site, our services or the law change. The date at the top shows when it was last revised. For significant changes we will make the update prominent on the Site and, where we hold your email address, may notify you directly.

Data protection questions, rights requests and complaints: admin@agenthos.ai. Please put "Privacy" in the subject line so we can route it quickly.

If you are unhappy with our response, you may complain to the data protection authority in your country.