Privacy Policy
What AgentLabz collects, why we collect it, how long we keep it, who else processes it, and the rights you have over it.
Effective 14 January 2025 · Last updated 1 August 2026
1. Who we are
AgentLabz is an enterprise AI agent platform operated from A-402, Lodha Elite, Amar Mahal Road, Chembur East, Mumbai, Maharashtra 400071, India. For any question about this policy, contact privacy@agentlabz.tech. For customer deployments AgentLabz acts as a processor; for our website and marketing we act as a controller.
2. Data we collect
Contact data you submit through our contact and demo forms: name, work email, company, company size, country, topic, and the message body. Account data for platform users: email, name, organisation, and role. Customer content your agents process: documents, tickets, transcripts, and tool payloads. Operational data: request logs, run traces, latency and token counts, and error events. We do not buy personal data from brokers and we do not run advertising trackers on this site.
3. Why we use it
To reply to enquiries you send us; to provide, secure, and operate the platform; to debug and improve reliability; to bill usage; and to meet legal obligations. Our lawful bases are contract performance, legitimate interests in operating and securing a business service, consent where you give it, and legal obligation.
4. Model training
We do not train foundation models on customer content, and we do not share customer content with model providers for their training. Prompts and completions are sent to the model provider only to serve the request. Where a provider offers a zero-retention configuration for API traffic, we use it.
5. Retention
Enquiry records are kept for up to 24 months from last contact. Platform account data is kept for the life of the account plus 30 days. Run traces default to 30 days and are configurable per workspace. Backups roll off within 35 days. Deletion requests are honoured across primary storage and then propagate through backup expiry.
6. Sub-processors and transfers
We use a small set of vetted infrastructure and model providers to run the service — cloud hosting and managed Postgres, transactional email, and inference providers. Each is bound by a written agreement containing confidentiality and security obligations. Data may be processed outside India, including in the EU and the United States, under Standard Contractual Clauses or equivalent safeguards. We never sell personal data.
7. Security
TLS 1.2+ in transit and AES-256 at rest, least-privilege access with role-based controls, tenant isolation at the data layer, audit logging of privileged actions, secret management outside source control, and dependency scanning in CI. Report a suspected vulnerability to security@agentlabz.tech; we acknowledge within two business days.
8. Your rights
Subject to applicable law, you may request access, correction, deletion, a portable copy, restriction, or objection, and you may withdraw consent at any time. Write to privacy@agentlabz.tech and we will respond within 30 days. If you are an end user of one of our customers, contact that customer first — they control the data and we will assist them.
9. Children
AgentLabz is a business product and is not directed at children under 16. We do not knowingly collect their data; if we learn we have, we delete it.
10. Changes
We will post material changes on this page and update the effective date. Continued use after a change means you accept the revised policy.
This policy describes our current practices and is provided for information. It is not legal advice, and it does not replace a signed data processing agreement. Enterprise customers can request our DPA at privacy@agentlabz.tech.