Privacy Policy

To help you read through our Privacy Policy, we provide brief, plain-English explanations. These explanations are for convenience only and are not legally binding.

Your privacy and enterprise data sovereignty are critically important to us. At AGENTS.inc, we operate under a few fundamental principles:

• We practice strict data minimization, asking only for what we truly need to operate our enterprise services.
• We process data securely within tenant-isolated environments.
• We never use your internal enterprise data or prompts to train public AI models.
• We ensure all automated data gathering (web crawling) by our AI Agents strictly adheres to privacy-by-design principles.

Below is our Privacy Policy which details how AGENTS HQ GmbH (“AGENTS.inc”, “we”, “us”, or “our”) collects, uses, and shares information about you when you use our website (www.agents.inc), the AGENTS HQ® platform, our APIs, and related services (collectively, the "Services").

1. Information We Collect

In short: We collect information you give us (like account details and workspace data) and information our systems collect automatically (like log data and public market intelligence gathered by our agents).

Information You Provide to Us

• Basic Account Information: To set up an AGENTS HQ workspace, we require basic contact information such as a name, corporate email address, and organization name.
• Transaction and Billing Information: If you purchase a subscription or Agent Tokens (Δ), we require additional payment and billing information to process the transaction.
• Workspace Content & Inputs: When you use our Services, you may upload data, brand guidelines, and prompts to your secure Workspaces. We store this data to allow your customized AI Agents to execute their workflows.
• Communications: We collect information when you request technical support, participate in onboarding sessions, or contact us directly.

Information We Collect Automatically

• Log & Usage Information: We collect standard server log information, including IP addresses, browser types, unique device identifiers, and timestamps. We also collect telemetry data on how our Services are used to ensure platform stability and optimize performance.
• Information from Local Storage: We use local storage and essential cookies to identify your session, remember your preferences, and secure your login.

Information Collected by AI Agents (Public Web Crawling)

Our Market Intelligence Agents (such as the Global News Radar and Media Seismograph) autonomously scan the open web, news sites, and social media for business and political intelligence. While this crawling is primarily targeted at corporate entities, market trends, and regulations, specific workflows (such as public affairs monitoring and political risk forecasting) do involve processing the personal data of politicians, policymakers, and public figures. We apply strict privacy-by-design principles: our algorithms focus solely on data relevant to the professional, political, and business context necessary to generate our Executive Reports, minimizing incidental data capture of private individuals.

2. How and Why We Use Information

In short: We use data to run your AI agents, bill you, and keep the platform secure. We explicitly do not use your private data to train public LLMs.

• To Provide the Services: To set up your tenant-isolated Workspace, orchestrate your AI agents via our Coordination Hub, and process your Agent Token consumption.
• To Ensure Security: To monitor for vulnerabilities, detect unauthorized access, and protect the infrastructure of AGENTS HQ GmbH and our clients.
• To Improve the Platform: To analyze usage trends and fix bugs.
• Zero-Data-Retention AI Processing: When routing your prompts and data to advanced LLMs via our Trust Layer, we do so via enterprise-grade APIs with strict zero-data-retention policies. Your internal data, prompts, and generated outputs are never used to train, improve, or fine-tune the public AI models of OpenAI, Anthropic, or Google.

3. Legal Bases for Processing (EU/GDPR)

In short: Under European law, we process your data because we have a contract with you, a legal obligation, or a legitimate business interest.

For individuals in the European Economic Area (EEA), our legal grounds for processing information under the General Data Protection Regulation (GDPR) include:

• Contractual Necessity: The processing is necessary to fulfill our commitments to you under our Terms of Service.
• Legal Obligation: Processing is necessary for compliance with our legal and financial obligations.
• Legitimate Interests: We have a legitimate interest in safeguarding our Services, improving our proprietary platform, communicating with our B2B clients, and operating our autonomous public web crawling for market intelligence.

Processing of Special Categories of Data (e.g., Political Opinions)

Because our agents monitor public and regulatory landscapes, they may process data that reveals political opinions (classified as a Special Category of Data under GDPR Article 9). We process this data lawfully under Article 9(2)(e) GDPR, as the data has been manifestly made public by the data subject (e.g., public speeches, official social media posts by politicians, and press releases). Furthermore, when executing these specialized monitoring workflows on behalf of our enterprise clients, we do so strictly governed by special agreements, specific Data Processing Agreements (DPAs), and enhanced security protocols that ensure strict purpose limitation and data isolation.

4. How We Share Information

In short: We don't sell your data. We only share it with heavily vetted sub-processors necessary to run the service.

We do not sell our users' private personal information. We disclose information only in the limited circumstances below, protected by strict Data Processing Agreements (DPAs):

• Sub-processors & Third-Party Vendors: We share data with enterprise-grade vendors who help us provide our Services. Our verified sub-processors include Cloud Hosting providers like Scaleway (France/EU) and Microsoft Azure (EU/USA), and AI Models (LLMs) like OpenAI, Anthropic, and Google – utilized exclusively via secure, zero-data-retention Enterprise APIs.
• Legal Requests & Protection of Rights: We may disclose information in response to lawful subpoenas or court orders, or when reasonably necessary to protect the property or rights of AGENTS HQ GmbH or third parties.
• Business Transfers: In connection with any merger, acquisition, or sale of company assets, user information would be transferred subject to the continuation of this Privacy Policy.

5. International Data Transfers (Schrems II Compliant)

In short: If your data travels outside Europe, it is protected by the latest EU-approved legal frameworks (DPF and SCCs).

We ensure that all international data transfers are strictly compliant with the GDPR. We prioritize sovereign European hosting (e.g., via STACKIT or EU-based AWS/GCP regions). Should the use of specific external AI models require the transfer of data to third countries outside the European Economic Area (EEA), including the United States, AGENTS.inc ensures such transfers are strictly governed by valid transfer mechanisms. This includes reliance on the EU-U.S. Data Privacy Framework (DPF) or the European Commission’s Standard Contractual Clauses (SCCs) supplemented by technical safeguards such as API-level data isolation.

6. Security Standards

In short: We treat your data like critical infrastructure. We use AES-256 encryption, TLS 1.2+, and undergo regular Penetration Testing.

AGENTS.inc maintains a comprehensive Information Security Management System (ISMS) rigorously aligned with ISO 27001 standards. All primary customer data is encrypted at rest (AES-256) and in transit (TLS 1.2 or higher). We support enterprise Single Sign-On (SSO), enforce strict Role-Based Access Control (RBAC), and conduct regular external Penetration Tests.

7. Your Data Rights

Subject to the GDPR and applicable laws, you have the right to request access to your personal data, request correction or deletion, object to our processing, and request data portability. You can manage your data via your AGENTS HQ dashboard or by contacting our Data Protection Officer.

8. Controllers and Contact Information

AGENTS HQ GmbH is the data controller for the personal information processed under this policy. Our commitment to data protection is overseen by our Data Protection Officer (DPO), Dr. Sebastian Denef.
AGENTS HQ GmbH
Schlossstr. 110
12163 Berlin, Germany

To submit a data request or contact our DPO, please email us securely at: [email protected].

9. Privacy Policy Changes

AGENTS HQ GmbH may change its Privacy Policy from time to time to reflect regulatory updates or changes to our AI architecture. If we make material changes, we will notify you through the AGENTS.inc dashboard or via email.