Agento is committed to protecting personal information in accordance with applicable privacy law and our privacy principles.
Agento processes two categories of data with materially different roles.
Information you give us when you create an account, request a demo, or correspond with us. This includes name, work email, company, role, and, if applicable, billing details. We use it to provide the Services, bill correctly, and communicate with you.
Data your organisation pushes into the Services so Agento can do its job: workflow definitions, skill configurations, connector credentials, prompts and outputs of AI executions, evidence artifacts, audit trail entries, and any personal information you choose to process through Agento workflows. We process Customer Data only on your documented instructions, as set out in our Data Processing Addendum (DPA).
OpenTelemetry traces, metrics, and logs from your tenant, used to operate the platform, debug failures, and meet our durability and reliability commitments. Telemetry is segregated from Customer Data and retained on a shorter cycle.
Where GDPR or UK GDPR applies, we rely on contract, legitimate interests, legal obligation, and, where required, consent.
Agento may process data outside the country in which you are located. Where required, we use Standard Contractual Clauses for transfers from the EU, the UK International Data Transfer Addendum for transfers from the UK, and equivalent recognised mechanisms for other regions.
Depending on where you live, you may have the right to access, correct, delete, port, or restrict the processing of your personal information, and to object to certain processing. If you are a customer's end user, please contact your employer first. We are typically the processor, not the controller, for that data.
To exercise rights as the controller of your own account data, email privacy@agento.com.au. We will respond within the timeframe required by applicable law.
We protect data in transit with TLS 1.2 or higher and at rest with AES-256. Encryption keys are managed via AWS KMS with envelope encryption. Access to production systems is least-privilege, audited, and gated by SSO, MFA, and break-glass approval. See the Security page for the full architecture.
The Services are not directed to anyone under 16. We do not knowingly collect personal information from children.
We will update this Policy as the Services evolve. Material changes will be announced via email to account administrators and posted on this page with a revised last updated date.
Privacy enquiries: privacy@agento.com.au
Data Protection Officer (DPO): a DPO is not currently appointed. Privacy enquiries are handled by the team at privacy@agento.com.au.
Postal address: available on request via privacy@agento.com.au.
Australian regulator: Office of the Australian Information Commissioner (OAIC), oaic.gov.au
EU / UK representative: not currently appointed. We will publish details if and when we are required to designate one.