Privacy Policy

1. Introduction

AIGent ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI agent platform and related services.

AIGent is operated by a company based in Switzerland. We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP/DSG) and, where applicable, the EU General Data Protection Regulation (GDPR).

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password (hashed), and profile details when you register
• Agent Content: System instructions, prompts, and configurations you create for your AI agents
• Chat Messages: Conversations between you (or your users) and AI agents
• Documents: Files you upload to knowledge bases for agent reference
• Payment Information: Billing details processed by our payment provider (we do not store full card numbers)

2.2 Information Collected Automatically

• Usage Data: API calls, token usage, and feature interactions
• Device Information: Browser type, operating system, and device identifiers
• Log Data: IP address, access times, and pages viewed

2.3 Information from Third-Party Integrations

When you connect external services (Google Drive, Gmail, Slack, etc.), we may receive:

• OAuth tokens (stored encrypted)
• Email addresses associated with connected accounts
• Data accessed through these integrations as configured by you

3. How We Use Your Information

We use your information for the following purposes:

Purpose	Legal Basis
Providing and operating the AIGent platform	Contract performance
Processing AI agent requests through LLM providers	Contract performance
Account management and authentication	Contract performance
Customer support and communication	Contract performance / Legitimate interest
Service improvements and analytics	Legitimate interest
Security and fraud prevention	Legitimate interest / Legal obligation
Legal compliance and regulatory requirements	Legal obligation

4. AI Processing and LLM Providers

When you use AI agents, your prompts and messages are sent to third-party LLM providers (such as OpenAI or Anthropic) to generate responses. These providers:

• Process data solely to provide the AI service
• Do not use your data to train their models (Zero Data Retention)
• Delete data after processing according to their retention policies
• Are bound by data processing agreements compliant with Swiss and EU law

5. Data Sharing and Recipients

We share your data only with:

5.1 Service Providers (Sub-processors)

• LLM Providers: OpenAI, Anthropic (for AI processing)
• Cloud Infrastructure: For hosting and data storage
• Payment Processors: For billing and subscriptions
• Authentication Services: For secure login

5.2 Legal Requirements

We may disclose information if required by law, court order, or government request, or to protect our rights and safety.

6. International Data Transfers

Your data may be transferred to and processed in countries outside Switzerland, including the United States. For such transfers, we ensure appropriate safeguards:

• US Transfers: We rely on the Swiss-US Data Privacy Framework for certified US companies
• Other Countries: Standard Contractual Clauses (SCCs) approved by the European Commission

7. Data Retention

We retain your personal data for as long as necessary to provide our services and fulfill the purposes described in this policy:

• Account Data: Until you delete your account
• Chat Messages: According to your retention settings (default: until deletion)
• Usage Logs: 90 days
• Audit Logs: 2 years (for security and compliance)
• Billing Records: 10 years (legal requirement)

8. Your Rights

Under Swiss data protection law and GDPR (where applicable), you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Where processing is based on consent

To exercise these rights, contact us at info@ai-gent.ch or use the data export and deletion features in your account settings.

9. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Access controls and authentication requirements
• Regular security assessments and monitoring
• Employee training on data protection
• Incident response procedures

10. Cookies and Tracking

We use essential cookies required for the platform to function. We do not use tracking cookies for advertising purposes.

• Session Cookies: For authentication and security
• Preference Cookies: To remember your settings

11. Children's Privacy

AIGent is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the platform. Your continued use after changes constitutes acceptance of the updated policy.

13. Contact Us

For questions about this Privacy Policy or our data practices: