Privacy Policy

Effective Date: 18th June 2025

Agnolytics Ltd ("we", "us", or "our") is committed to protecting the privacy and personal data of our customers, users, and website visitors ("you", "your"). This Privacy Policy explains how we collect, use, store, and protect your information when you access or use our services, including the Agnolytics CRM SaaS platform and voice AI services.

By using our services, you agree to the terms of this policy.

1. Who We Are

2. Scope of This Policy

This policy applies to:

• Users of the Agnolytics CRM platform
• Visitors to our website
• Customers and their users (B2B & B2C)
• Voice AI interactions and call recipients

It does not apply to third-party websites or services linked to from our platform.

3. What Data We Collect

We may collect and process the following types of data:

A. Personal Information

• Name, email address, company name, phone number
• Login credentials
• Billing and payment information
• Customer support interactions

B. Usage Data

• IP address, browser type, time zone settings
• Pages visited, session duration, referral source
• System logs, API usage, call metadata (if using AI agents)

C. Voice Interaction Data

• Audio recordings (if enabled)
• Transcripts of voice bot conversations
• AI interaction logs (for training/improvement)

D. Third-Party Data

• Contact lists you upload to the CRM
• External data from integrations (e.g., WhatsApp, Google Calendar, SIP providers)

4. How We Use Your Data

We process your data for the following lawful purposes under the UK GDPR:

Purpose	Lawful Basis
Providing and managing your CRM account	Contractual necessity
Enabling AI voice agent interactions	Legitimate interest / Contractual necessity
Billing, invoicing, and payments	Legal obligation / Contract
Improving our platform	Legitimate interest
Marketing and newsletters	Consent (opt-in only)
Responding to support requests	Contractual necessity

5. Who We Share Data With

We may share data with:

• Cloud service providers (e.g., AWS, Azure)
• Payment processors (e.g., Stripe)
• Communication APIs (e.g., Twilio, WhatsApp)
• AI service providers (e.g., OpenAI, ElevenLabs – if voice/text generation is outsourced)
• CRM integrations (with your permission)
• Legal and regulatory authorities (if required by law)

All third parties are contractually required to protect your data and use it only as instructed.

6. International Data Transfers

If we transfer data outside the UK or EU (e.g., to the US), we ensure appropriate safeguards such as:

• UK Standard Contractual Clauses (SCCs)
• Adequacy decisions (where applicable)
• Vendor DPA agreements compliant with UK GDPR and EU GDPR

7. Data Retention

We retain personal data only for as long as necessary:

• CRM account data: as long as you're an active customer + 90 days
• Voice logs & transcripts: up to 180 days (unless otherwise agreed)
• Billing records: up to 7 years (for tax/legal compliance)
• Marketing data: until you opt-out or unsubscribe

You may request data deletion at any time, subject to legal requirements.

9. California Residents – CCPA Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• Right to know what data we collect
• Right to request deletion
• Right to opt-out of sale of personal data (we do not sell personal data)
• Right to non-discrimination

To submit a CCPA request, contact: privacy@agnolytics.com

10. Cookies & Tracking

We use cookies and similar technologies to:

• Improve user experience
• Remember login preferences
• Analyse traffic and usage patterns
• Enable session-based functionality

You can control cookies via your browser or adjust preferences via our [Cookie Consent Banner].

11. Security

We implement strong security measures including:

• End-to-end encryption for data in transit (HTTPS)
• Encryption at rest
• Role-based access controls (RBAC)
• Two-factor authentication (2FA)
• Periodic audits and vulnerability testing

12. Children's Privacy

Our services are intended for businesses and individuals aged 18 or older. We do not knowingly collect data from children under 16. If you believe we have collected such data, please contact us immediately.

13. Policy Updates

We may update this policy from time to time. Material changes will be communicated via:

• Email notification
• In-app notice
• Website banner

Continued use of the platform implies acceptance of the updated policy.