AGL 365

Privacy Policy

Last updated: January 1, 2025

AGL 365 (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our CRM platform and related services.

1. Information We Collect

We collect information you provide directly: name, email, phone number, business details, and payment information. We also collect data you input into the Service: contacts, leads, notes, tasks, appointments, and documents. Additionally, we automatically collect usage data including IP address, browser type, device information, pages visited, and feature usage patterns.


2. How We Use Your Information

We use your information to: (a) provide, maintain, and improve the Service; (b) process transactions and send billing notifications; (c) send service-related communications; (d) provide AI-powered features including contact analysis, task extraction, and automated suggestions; (e) personalize your experience; (f) detect and prevent fraud or abuse; (g) comply with legal obligations.


3. AI Data Processing

Our AI features process your contact data, notes, and interaction history to generate insights, suggestions, and automated content. This processing is done using OpenAI's API and Supabase vector storage. Your data is sent to these services solely for the purpose of providing AI features. We do not use your data to train AI models. You can disable AI features at any time in your Settings.


4. Data Sharing

We do not sell your personal information. We share data only with: (a) service providers who help us operate the Service (hosting, email delivery, payment processing, AI processing); (b) third-party integrations you explicitly enable (Google, Twilio, etc.); (c) law enforcement when required by law; (d) in connection with a merger, acquisition, or sale of assets, with prior notice to you.


5. Third-Party Services

When you connect integrations, data flows to third-party services: Google Workspace (calendar, email, files), Twilio (SMS, WhatsApp), OpenAI (AI features), and Supabase (data storage). Each service has its own privacy policy. We recommend reviewing them. We only share the minimum data necessary for each integration to function.


6. Data Storage & Security

Your data is stored on secure servers in the United States. We use industry-standard security measures including: encryption in transit (TLS 1.3) and at rest (AES-256), regular security audits, access controls and authentication, automated backups, and monitoring for unauthorized access. While we strive to protect your data, no method of transmission or storage is 100% secure.


7. Data Retention

We retain your data for as long as your account is active. After account termination, we retain your data for 30 days to allow for reactivation or data export. After 30 days, your data is permanently deleted from our primary systems. Backups may retain data for up to 90 days. Billing records are retained for 7 years as required by law.


8. Your Rights

You have the right to: (a) access your personal data; (b) correct inaccurate data; (c) delete your data ("right to be forgotten"); (d) export your data in a portable format; (e) restrict processing of your data; (f) object to automated decision-making; (g) withdraw consent at any time. To exercise these rights, contact us at privacy@agl365.com or use the Settings page in your account.


9. Cookies & Tracking

We use essential cookies for authentication and session management. We use analytics cookies to understand how the Service is used. We do not use advertising cookies or trackers. You can manage cookie preferences in your browser settings. Disabling essential cookies may prevent the Service from functioning properly.


10. Communications

We send transactional emails (account verification, password reset, billing). We may send product updates and tips — you can unsubscribe at any time. We send automated messages on your behalf through the Automations feature — you control the content and recipients. We never send marketing emails to your contacts.


11. Children's Privacy

The Service is not intended for children under 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will delete it promptly. If you believe a child has provided us with personal information, please contact us.


12. International Transfers

If you are located outside the United States, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.


13. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA: the right to know what personal information is collected, the right to delete personal information, the right to opt-out of the sale of personal information (we do not sell your data), and the right to non-discrimination for exercising your rights. To make a CCPA request, contact privacy@agl365.com.


14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification at least 30 days before they take effect. The "Last updated" date at the top of this page indicates when the policy was last revised.


15. Contact Us

For privacy-related questions or requests, contact us at: privacy@agl365.com. For general support: support@agl365.com.