Privacy Policy

1. About this policy

This Privacy Policy explains how Agimus Technologies, Inc. (“Agimus”, “we”, “us” or “our”) collects, uses and shares personal information, and the rights you have over it. Agimus is a Delaware corporation based in Palo Alto, California.

This policy applies to:

• Visitors to our website at agimus.ai
• People who contact us or do business with us, including prospective customers and contacts at our customers, partners and suppliers
• People who use the Agimus platform at app.agimus.ai as users of a customer’s account

It does not apply to Customer Data, which is described in section 2.

2. Customer Data

Customers use the Agimus platform to bring together data from the systems and files they already use, model it, and make it available to their teams, applications and AI tools. We call the data a customer puts into the platform “Customer Data”. It may include personal information, such as details about the customer’s employees, clients or suppliers.

We process Customer Data on the customer’s behalf, under the customer’s agreement with us and, where one applies, our data processing addendum. For this data, the customer is the controller and we are its processor (or service provider under US state privacy laws). We use Customer Data only to provide, secure and support the platform, as the customer instructs and as the law requires. The customer decides what data goes into the platform, who can access it and how long it is kept.

The customer’s own privacy policy applies to Customer Data. If you have a question about personal information in a customer’s data, or want to exercise your rights over it, please contact that customer. If you contact us instead, we refer your request to the customer.

Users of a customer’s account

If you use the platform through your organization’s account, your organization controls that account. Its administrators can add and remove users, decide what data each user can access, set security requirements and review the actions recorded in the organization’s audit log. Your organization’s own policies govern how it uses this information. Questions about them should go to your organization.

3. Information we collect

Information you give us

• Contact form. When you write to us through our website, you give us your name, work email, company and message. The form sends this to us by email. The website does not store it.
• Emails and meetings. When you write to us or meet with us, we collect your name, job title, company, contact details and anything else you choose to share.
• Customer accounts. When your company becomes a customer, we collect the names and contact details of the people who sign the agreement, manage the account or handle invoices.
• Platform accounts. When you join the platform, we collect your name, work email and password, and your two-factor authentication settings if you use it.

Information we collect automatically

• Website. Google Cloud, our hosting provider, keeps standard server logs for each request: IP address, browser and device type, the page requested, the referring page, and the date and time.
• Platform. When you use the platform, we record your IP address, browser and device type, the pages you open and the API requests you make, and the date and time. The platform also records administrative actions, such as changes to users, groups, permissions and settings, in your organization’s audit log, with the name of the person who made each change. For API keys, we record when each key was last used.

Information from other sources

• Your organization. When an administrator invites you to the platform, they give us your name and work email and choose your role and groups.
• Public sources. We may collect business contact details, such as name, job title and company, from company websites and professional networking sites.

4. How we use information

We use personal information to:

• Respond to your messages and requests
• Provide and operate the platform, including setting up accounts, signing users in and sending service emails such as invitations and password resets
• Provide support to customers and their users
• Protect our website and platform, including preventing spam, fraud, abuse and unauthorized access
• Monitor performance, fix problems and improve our services
• Manage our relationships with customers, partners and suppliers, including agreements and invoicing
• Send you news about Agimus, such as product updates and events, where the law allows. You can opt out at any time.
• Comply with the law, respond to lawful requests, enforce our agreements, and protect our rights and the rights of others

AI features

The platform’s built-in assistant uses Anthropic’s Claude models. When a user works with the assistant, the user’s messages and the data needed to answer them are sent to Anthropic to generate a response. The assistant can read only the data that user is allowed to see. Anthropic processes this data for us as a subprocessor and does not use it to train its models. Conversations with the assistant are stored in the platform as Customer Data.

We do not use Customer Data, or the personal information described in this policy, to train AI models.

5. Legal bases for processing

If you are in the European Economic Area (EEA), the United Kingdom or Switzerland, we process your personal information on the following legal bases:

• Contract: to perform a contract with you, or to take steps you ask for before entering into one.
• Legitimate interests: to respond to inquiries, provide the platform to our customers’ users, keep our website and platform secure and improve them, manage business relationships, market to business contacts, and establish or defend legal claims. We rely on these interests only where your rights and interests do not override them.
• Consent: where we ask for it. You can withdraw your consent at any time. This does not affect processing that took place before you withdrew it.
• Legal obligation: to meet tax, accounting and other legal requirements.

If you have questions about the legal basis for a specific use, contact us at contact@agimus.ai.

6. How we share information

We do not sell personal information, and we do not share it for advertising. We share it only as described below.

Service providers

We use service providers to run our website, platform and business. They may use personal information only to provide their services to us, under contracts that require them to protect it. Our main service providers are:

• Google Cloud: hosting for our website and platform, including server logs
• Resend: delivery of contact form messages and platform emails, such as invitations and password resets
• Anthropic: AI models for the platform’s built-in assistant
• Voyage AI: search across a customer’s data model in the platform
• Providers of the email and business software we use to run the company

Our Security page lists the subprocessors that process Customer Data.

Other recipients

• Your organization’s administrators, if you use the platform through your organization’s account, as described in section 2.
• Professional advisers, such as lawyers, accountants and insurers, who are bound by confidentiality.
• Authorities and others, where the law requires it, or where we need to protect the rights, property or safety of Agimus, our customers or others.
• A buyer, investor or other party in a merger, acquisition, financing or sale of assets, including during the review before such a transaction.
• Anyone else, with your consent or at your direction.

7. Cookies and similar technologies

Our website does not use cookies. It has no analytics, advertising pixels or third-party scripts.

The platform uses two cookies that it needs to work. One keeps you signed in. The other protects against cross-site request forgery. The platform also saves your profile and display preferences in your browser’s local storage. It does not use analytics or advertising cookies.

We do not track visitors over time or across other websites, and we do not allow advertisers or analytics providers to do so through our website. For this reason, Do Not Track signals from your browser do not change how we handle your information.

8. International data transfers

Agimus is based in the United States, and our website is hosted there. The platform stores Customer Data and account information on Google Cloud in the European Union. Some of our service providers, including Resend, Anthropic and Voyage AI, process personal information in the United States.

When we transfer personal information from the EEA, the United Kingdom or Switzerland to a country without an adequacy decision, we use the European Commission’s Standard Contractual Clauses, with the UK Addendum or the Swiss amendments where they apply. For Customer Data, these clauses are part of our data processing addendum with the customer. You can ask us for more information about these safeguards.

9. How long we keep information

We keep personal information only as long as we need it for the purposes described in this policy. We keep account information while the account is active, and business contact information while it is relevant to our business relationship. We keep some information longer where the law requires it, such as tax and accounting records, or where we need it to resolve disputes, enforce our agreements or keep our services secure. When we no longer need personal information, we delete or anonymize it.

We keep Customer Data as set out in the customer’s agreement. We delete the customer’s data from the platform 30 days after the agreement ends, or sooner if the customer asks. Copies in backups are deleted when those backups expire.

10. Security

We use technical and organizational measures to protect personal information against unauthorized access, loss, misuse and alteration. These include HTTPS on all connections to our website and platform, encryption of stored data, passwords stored only as hashes, two-factor authentication, and access limited to staff who need it for their work. Our security program follows the SOC 2 Trust Services Criteria. Our Security page has more detail.

No method of transmission or storage is completely secure, so we cannot guarantee the security of personal information. To report a security concern, email contact@agimus.ai.

11. Your rights and choices

Depending on where you live, you may have the right to:

• Find out whether we hold personal information about you, and get a copy of it
• Correct personal information that is inaccurate or incomplete
• Delete your personal information
• Receive your personal information in a portable format
• Object to or restrict certain uses of your personal information
• Withdraw consent, where we rely on it

You can opt out of marketing emails at any time by using the unsubscribe link in the email or by contacting us. Platform users still receive service emails, such as invitations and password resets.

How to make a request

To exercise your rights, email contact@agimus.ai. We may need to verify your identity before we respond, usually by matching the details you give us with the information we already hold. You can ask an authorized agent to make a request for you. If you do, we ask the agent for proof that you authorized them. We respond within the time the law requires. We do not treat you differently because you exercised your rights.

EEA, United Kingdom and Switzerland

Agimus Technologies, Inc. is the controller of the personal information described in this policy. The Agimus platform is built to meet GDPR requirements. You have the rights listed above under the GDPR, the UK GDPR and Swiss data protection law. You also have the right to complain to the data protection authority in the country where you live or work, or where you believe a breach occurred.

California

If you live in California, the California Consumer Privacy Act (CCPA) gives you the right to know what personal information we collect, use and disclose, and to access, correct and delete it.

In the past 12 months, we have collected these categories of personal information: identifiers, such as name, email address and IP address; professional information, such as company and job title; internet or other electronic network activity, such as server logs and platform usage; commercial information, such as records of the services a customer has bought; and the content of messages you send us. We collect this information from the sources described in section 3, use it for the purposes described in section 4, disclose it for business purposes to the recipients described in section 6, and keep it as described in section 9.

We use sensitive personal information, such as account passwords, only to provide our services and for other purposes the CCPA permits.

We do not sell personal information or share it for cross-context behavioral advertising, and we have not done so in the past 12 months. We have no actual knowledge of selling or sharing the personal information of anyone under 16.

Other US states

If you live in another US state with a consumer privacy law, you may have similar rights, including the right to access, correct, delete and get a copy of your personal information. To make a request, email contact@agimus.ai. If we decline your request, you can appeal by replying to our decision. If we deny your appeal, you can contact your state’s attorney general.

12. Children

Our website and platform are for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we delete it. If you believe a child has given us personal information, contact us at contact@agimus.ai.

13. Other websites and services

Our website links to other websites, such as LinkedIn. Customers can also connect other services to the platform, such as their own data sources, GitHub repositories and AI tools that connect through the Agimus MCP server or API. This policy does not apply to those websites and services. Their own terms and privacy policies govern how they handle your information.

14. Changes to this policy

We may update this policy from time to time. When we do, we post the new version on this page and change the “Last updated” date. If we make material changes, we give more prominent notice, such as a notice on our website or an email to customers.

15. Contact us

If you have questions about this policy or how we handle personal information, contact us at:

Agimus Technologies, Inc., Palo Alto, California

Email: contact@agimus.ai