YOUR INFORMATION

Privacy policy.

Last updated: 16 October 2026.

This policy explains how Agentscy AI collects, uses, shares and retains personal information when you visit our website, contact us or use our services.

Who we are and what this policy covers

Agentscy AI is operated by Apricotlabs Technologies (OPC) Private Limited (“Agentscy”, “we”, “us” or “our”). This policy covers agentscy.ai, the Agentscy Voice platform, our demos and our interactions with prospective and existing customers. For privacy questions or requests, contact hello@agentscy.ai.

When a business uses Agentscy to handle its calls, documents or workflows, that business determines why that information is processed. We process it on the business’s instructions under the relevant service agreement. If you are a caller or customer of that business, contact it first about your information; we help it respond where appropriate. A service agreement or data processing agreement may provide additional details for a particular deployment.

Information we collect

Information you provide. Your name, email address, company, project description, optional budget and timeline, booking details and correspondence. Account information may include your sign-in details, organisation, role, preferences and billing or usage records.
Customer content. Documents, text, business knowledge, agent instructions and information submitted or connected by you or your organisation. This can include information about customers, callers, staff or other people.
Conversation and workflow data. Audio processed during a voice interaction, transcripts, messages, call details, summaries, tool requests and results, and records of actions taken. What is collected depends on the feature and deployment.
Connected-account information. Account identifiers, permissions, access credentials, configuration and information used by the integrations you authorise. The connected-apps section below explains this further.
Technical and usage data. IP addresses or derived identifiers, browser and device information, pages visited, timestamps, referral and campaign information, performance measurements and security or diagnostic logs.

We receive information directly from you, from your organisation, from people interacting with a customer’s agent, and from services you or your organisation choose to connect. Please leave passwords, payment-card details and unnecessary sensitive information out of contact messages and demo uploads.

How we use information

Provide the website and services, manage accounts, run conversations and carry out configured workflows.
Respond to messages, arrange meetings, scope projects and provide support.
Measure usage and costs, evaluate service quality, investigate failures and improve reliability and performance.
Understand interest in our services and campaign performance, subject to the cookie choices described below.
Prevent abuse, secure accounts, enforce agreements and meet legal obligations.

Where applicable law requires a legal basis, we rely on consent for optional tracking and permission-based features; on contractual necessity to provide services or take steps you request before an agreement; on legitimate interests in responding to business enquiries, maintaining service reliability and preventing abuse, where permitted; and on legal obligations for required records and disclosures. You can withdraw consent for processing that relies on it.

When you send a message or book a meeting

The contact form sends your name, work email, company, selected service, project description and any optional budget or timeline to our backend. We save the message and send an email notification to our team so we can respond. The confirmation on the page means we have received your message; it does not confirm a booking or an agreed project.

We use limited request information, including a keyed hash of the network address, to limit spam and duplicate submissions. We do not send the contents of your message to analytics tools.

Opening a booking link loads a Cal.com calendar. Cal.com receives the browser information needed to display it and the details you enter to arrange the meeting. We use those details to prepare for and follow up on the conversation.

Cookies and similar technologies

We use first-party storage for consent choices, account and demo sessions, and campaign attribution. Optional analytics and advertising tools load only after you choose Accept. You can change that choice through Cookie settings in the website footer or the Voice dashboard.

Consent and sessions. The agentscy_consent cookie remembers your choice across our website and dashboard for up to 180 days. Account and demo sessions use their own identifiers so the service can recognise your session. Some preferences and demo-resume information use local storage.
Campaign attribution. The first-party agentscy_attr cookie can keep campaign labels, landing-page and referring-site information for up to 90 days, including when optional analytics is declined. If you create an account, this information can be stored with it and the cookie is cleared. Advertising click identifiers are retained only with analytics consent. The demo also stores limited arrival information in local storage.
Optional measurement. We use Google Analytics and may enable Google Ads, Meta or LinkedIn measurement on the marketing site. Only Google’s tools are supported in the Voice dashboard. When enabled with your consent, these providers receive page and event information, browser or device details and network information, and may set their own cookies. We do not send contact-message contents, uploaded documents or call transcripts as analytics events.

Withdrawing consent stops our optional tracking and removes associated cookies where we can. It does not undo information already sent to a provider. Browser settings can also clear or block cookies and local storage; doing so may affect sign-in, preferences or demo continuity.

AI processing and model training

Voice and agent features use third-party services to transcribe speech, process documents and context, generate responses and synthesise audio. Information needed for the task, including relevant conversation content and tool results, may be sent to the providers configured for that feature or deployment. Providers can include Anthropic, Sarvam AI and ElevenLabs; customers may use other supported providers through their own accounts.

We do not use your contact messages, demo documents, conversations or connected-account data to train our own general-purpose AI models. Provider processing and retention are governed by the applicable provider terms, account settings and customer agreement. A customer-requested model engineering engagement is scoped separately. Google user data is subject to the additional restrictions below.

When you connect your own apps

You or an authorised person in your organisation can connect supported services so an agent can perform configured actions. For OAuth connections, the provider’s consent screen shows the requested permissions. Other integrations use credentials you choose to supply. Availability depends on the integration and your deployment.

What is accessed. Google Calendar connections use account identity, calendar lists, availability and event information to find times and create or update appointments. Google Sheets connections use account identity and spreadsheet data to look up or append rows in configured spreadsheets. Slack connections can use workspace, channel and member details, including email addresses, and messages or events available to the app to support configured messaging workflows. The permissions you approve may cover more data than an individual configured action uses.

What is stored and shared. We store connection identifiers, granted permissions, settings and credentials needed to operate the integration. Credentials are kept in an encrypted secret store and are not returned in full to the dashboard. Relevant inputs and outputs may be included in conversation context, workflow results and audit records. Information needed to carry out an action can be sent to the connected service and to the infrastructure or AI providers involved in that workflow.

Your control. You can disconnect an account in the platform or revoke access in the provider’s settings. Disconnecting disables future use of that connection in Agentscy, requests provider revocation where supported and schedules stored credentials for deletion. Our secret store normally has a seven-day recovery window before permanent deletion. Disconnection does not erase records of past actions, content already saved in conversations or records in another service; contact us about deletion of those records.

Additional protection for Google user data

Agentscy’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use Google user data only to provide or improve the user-facing features you use. We do not sell it, use it for advertising or credit decisions, or use it to develop, improve or train generalised or non-personalised AI or machine-learning models. We do not transfer it to an AI provider for those training purposes.

Transfers are limited to providing or improving those features with your consent, security purposes, compliance with law, or a business transfer with your explicit prior consent. Human access is limited to your affirmative permission for specific data, necessary security or legal purposes, or aggregated internal operations as permitted by Google’s policy. These restrictions apply in addition to the general sharing section below. You can revoke Google access from your Google account settings.

How we share information

We do not sell your personal information. We share information where needed with:

Service providers. Hosting, storage, email, scheduling, speech, AI, telephony, monitoring and, with your consent, analytics providers. Our services use AWS infrastructure and email delivery; the marketing website uses Hetzner hosting. The providers used for a customer deployment depend on its configuration and agreement.
Your organisation and connected services. Authorised workspace users and administrators, and services you direct an agent to use, receive information needed for their roles or the configured workflow.
Legal and security recipients. Where disclosure is required by law or reasonably necessary to address fraud, abuse, security incidents or threats to rights or safety.
A business successor. In connection with a merger, acquisition or asset transfer, subject to applicable confidentiality, notice and consent requirements. The stricter Google-data conditions above continue to apply.

How long we keep information

Contact messages. Records in the website intake database are retained for up to 90 days. Notification emails, correspondence and records of an ongoing engagement are held separately for as long as needed to respond, deliver the engagement or meet legal and record-keeping requirements.
Unclaimed demos. Uploaded files, extracted text and transcripts become eligible for deletion after 48 hours and are removed by scheduled cleanup. Extracted business facts, the agent profile and usage or diagnostic records can remain after that cleanup. If you save the agent to an account, its content becomes part of that account.
Customer content and transcripts. Retention depends on the workspace settings and service agreement. The standard transcript retention setting is 90 days and can be changed by an authorised administrator. Other account, knowledge, workflow and audit records are retained as needed to provide the service, maintain security and meet contractual or legal obligations.
Deleted records and backups. Removal from active systems may precede removal from backups or a provider’s recovery window. Limited records may be retained where required by law, to resolve disputes or to prevent abuse.

You can request deletion at hello@agentscy.ai. We will explain any information we must retain and why.

Voice conversations and demos

Voice features process your audio so the agent can understand and respond. The separate website demo transcribes conversations; Agentscy does not retain recordings of the caller’s audio or create voiceprints for that demo. Speech providers process audio to supply their services. Recording and retention arrangements for customer phone deployments depend on the deployment and the customer’s notice to callers.

Use a public business document for a demo. We screen uploads for certain personal information, but screening is not a guarantee that all personal information will be detected. You can use Delete my demo data at the end of a demo to request removal of its document, transcript, generated agent and visit record. Once saved to an account, manage the content through that account or contact us.

If company-level visitor identification is enabled for a demo, a lookup provider can receive a network address to identify the organisation associated with it. This feature is disabled unless configured and excludes visitors identified as being in the EEA, UK or Switzerland. It is not used to identify an individual visitor.

Security and international processing

We use measures such as HTTPS for public connections, encrypted hosted databases and credential storage, and access permissions to protect information. Access is limited according to the service and support work being performed. No transmission or storage system can be guaranteed completely secure.

Information may be processed in India and in other countries where our hosting, communications, AI and connected-service providers operate, including the United States and Europe. Those countries may have different data protection laws. Deployment-specific hosting and transfer arrangements are addressed in the relevant service agreement. Where applicable law requires additional safeguards for a transfer, those requirements apply.

Your choices and privacy requests

You can change optional tracking through Cookie settings, disconnect integrations, use available account or demo deletion controls, and ask us to stop non-essential communications. You may request access, correction or deletion of your information by emailing hello@agentscy.ai with the subject “Privacy request”.

Depending on the law that applies, you may also have rights to portability, restriction, objection, withdrawal of consent or a complaint to the relevant data protection authority. We may need to verify your identity or authority to act for an organisation before completing a request. If we process your information on a customer’s behalf, we will direct the request to that customer or assist it under our agreement.

Children

Our website and business services are intended for adults and are not directed to children under 18. If you believe a child has provided personal information to us, please contact us so we can investigate and take appropriate action.

Changes and contact

We may update this policy as the service or applicable requirements change. We will update the date on this page and provide additional notice or seek consent where required for a material change.

For privacy questions, complaints or requests, contact Apricotlabs Technologies (OPC) Private Limited at hello@agentscy.ai.