Privacy Policy

1. Who are we?

This Privacy Policy applies to the website www.agentova.ai, published by:

PILBEE GmbH
Gewerbestrasse 5
6330 Cham
Switzerland

Identification number: CHE-230.360.585
[email protected]

2. Our commitment

At Agentova, we believe automation must never come at the expense of privacy.

We are committed to complying with:

• the General Data Protection Regulation (GDPR – EU 2016/679)
• the Swiss Federal Act on Data Protection (nFADP)
• the Google API Services User Data Policy, including the “Limited Use” requirements for data obtained from Google APIs

This means:

• we never resell your data;
• we never use it for advertising;
• we never share it with third parties unnecessarily;
• human access is limited to strictly necessary cases (support, security or legal obligation).

3. What data do we collect?

3.1 Data you provide

• last name, first name;
• email address;
• your company name;
• content added to your Agentova Brain (texts, files, notes);
• data entered in the agents (texts, files, answers to questionnaires);
• payment information (through our secure providers).

3.2 Data collected automatically

• IP address, browser type, device type;
• connection and error logs;
• platform usage data (interactions with the agents);
• cookies (see Cookie Policy).

3.3 Data from Google (if you connect your Gmail account)

When you connect your Google account, we request only the strictly necessary permissions:

• https://www.googleapis.com/auth/gmail.readonly
  → reading selected emails for analysis, sorting or assisted replies
• https://www.googleapis.com/auth/gmail.send
  → sending emails through an agent
• https://www.googleapis.com/auth/gmail.compose
  → creating drafts that you can validate manually

Specific data collected:

• Gmail email address;
• email content (only if you have given your explicit permission).

We never access your contacts, Google Drive or other services without explicit consent.

3.4 Other providers

You can connect other services (social networks, CRM, messaging, etc.).

In that case, only the data strictly necessary for the features you have enabled is collected.
The same principles apply: limited use, no sale, no advertising.

4. Purposes of processing

We use your data to:

• provide the AGENTOVA.AI services (creating and running agents);
• personalize and optimize your user experience;
• provide customer support (human or AI);
• improve the platform (usage analysis, debugging);
• meet our legal obligations (billing, security, compliance);
• run, at your request, certain automations through the Google APIs (reading, replying or drafting emails).

Google data is used only for the features you voluntarily enable.

5. Legal basis for processing

Processing is based on:

• performance of the contract;
• legitimate interest (improving the service, preventing abuse);
• your consent (cookies, newsletter, Gmail connection);
• legal obligations (accounting, security).

6. Data retention period

• account data: kept as long as the account is active;
• billing data: 6 to 10 years depending on legal obligations;
• technical logs: up to 12 months;
• Agentova Brain data: until you delete it;
• Google OAuth tokens: deleted when you disconnect or delete your account.

7. Where is your data stored?

Data is hosted in the European Union by providers recognized for their security, including:

• Google Cloud Platform / Firebase (EU)
• Vercel
• Neon / PostgreSQL

No transfer outside the EEA without appropriate safeguards (standard contractual clauses, etc.).

8. Who has access to your data?

Your data is accessible only to:

• you, through your account;
• our technical team, only when necessary (support, security);
• our GDPR-certified processors (payment, hosting, analytics).

No data is sold or used for advertising purposes.

Gmail data:

• is used only for the actions you have validated;
• is never shared with third parties;
• is never used to train models or for advertising.

9. Security

We apply strict security measures:

• TLS encryption in transit and at rest;
• secure storage of OAuth keys and tokens;
• role-based access control (principle of least privilege);
• monitoring and audit logs;
• backups, redundancy, regular audits;
• partial anonymization of sensitive content.

Agents are never reviewed manually.

Important:
Agentova does not develop or train any proprietary AI model.
Processing is carried out through specialized providers (OpenAI, Google Gemini).

Their respective policies can be found here:

• OpenAI Privacy Policy
• Google AI Privacy Policy

10. Your rights

In accordance with the GDPR and the nFADP, you have the following rights:

• right of access;
• right to rectification;
• right to erasure;
• right to data portability;
• right to restriction of processing;
• right to object;
• right to withdraw your consent at any time.

[email protected]

11. Deletion and revocation

You can:

• delete your data from the platform or by email;
• revoke Google access from your Google account;
• delete your Agentova account (data is deleted within 30 days at most, subject to legal obligations).

For any request: [email protected]

12. Use of cookies

A consent banner is displayed when you arrive on the site.
You can manage your preferences at any time.

See our Cookie Policy.

13. Changes to this policy

This policy may be updated at any time.
The version in force is the one published on the site.