Privacy & Legal Notice

Last updated: 27th November 2025

Your Privacy Matters to Us

We believe in being completely transparent about how we handle your personal information. This notice explains what data we collect when you contact us, why we need it, and what control you have over your information. We've written this in plain language because legal documents shouldn't require a law degree to understand.

What Happens When You Contact Us

When you reach out through our website, we collect just the essential information needed to help you effectively:

Required Information:

Your first name and last name (so we know who we're talking to)
Your business email address (so we can respond to your inquiry)

Optional Information:

Your company name (helpful if your inquiry is business-related)

Automatic Technical Data:

Behind the scenes, our website automatically collects some technical information to function properly and stay secure. This includes your IP address (like your internet "postal code"), what type of browser you're using, and which website referred you to us. Think of this as the digital equivalent of a visitor log - it helps us keep our website running smoothly and protect against security issues.

How We Use Your Information

We use your information for two main purposes, and we want to be crystal clear about each:

Responding to Your Inquiry

This is the obvious one - when you contact us with questions about our services or potential business opportunities, we use your contact details to get back to you with helpful information. Legally speaking, this is based on our "legitimate business interest" (Article 6(1)(f) of the GDPR) in communicating with potential clients, or it might be considered a "pre-contractual step" (Article 6(1)(b) of the GDPR) if you're asking about working together.

Security and Website Operations

We keep logs of website activity to protect against hackers, spam, and other security threats. We also use this information to understand how our website is performing and make improvements. This is based on our legitimate business interest in maintaining a secure and well-functioning website.

What We Don't Do

We don't create detailed marketing profiles about you, and we don't make automated decisions that could significantly affect you based on your data.

How Long We Keep Your Information

We don't keep your information forever. Here's our approach:

Contact Information and Inquiries: We keep your contact details and the substance of your inquiry for 24 months after our last interaction. This gives us enough time for natural follow-up conversations and potential future business relationships without keeping data indefinitely.

Security Logs: Technical security logs are automatically deleted after 12 months - long enough to investigate any security issues, but not indefinitely.

Your Rights - What You Can Do

You have significant control over your personal information. Here's what you can do:

See What We Have (Access Right)

You can request a complete copy of all personal data we hold about you. We'll provide this in a clear, understandable format within one month.

Fix Incorrect Information (Rectification Right)

If any information we have is wrong or incomplete, just let us know and we'll correct it promptly.

Delete Your Information (Erasure Right)

In many cases, you can ask us to delete your personal information entirely. There are some situations where we might need to keep certain data (like for legal compliance), but we'll explain our reasoning if this applies.

Object to Processing (Objection Right)

Since we process your contact information based on our legitimate business interest (to respond to your inquiry), you have the right to object to this processing at any time. If you object, we will stop processing your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms. To exercise this right, simply email us at privacy@agenthuman.ai.

How to Exercise These Rights

Simply email us at privacy@agenthuman.ai with your request. We'll respond within one month and won't charge you for reasonable requests.

If you're not satisfied with how we handle your request, you have the right to file a complaint with the Spanish Data Protection Authority (AEPD).

When You Use the AgentHuman Product

This section explains how we handle data when you use AgentHuman to research professionals and create outreach messages. This is separate from how we handle inquiries through our contact form (covered above).

Your Account Information

When you sign up for AgentHuman, we collect:

Your full name
Your business email address
Your job title (to understand your role and needs)
Your company name

We use this information to create and manage your account, communicate with you about the service, and tailor the experience to your professional context.

Our Legal Basis (For EU/UK Users)

We process this data based on our legitimate business interest (GDPR Article 6(1)(f)) in providing research services to our customers. We've carefully balanced our business needs against the privacy rights of researched individuals:

Why we believe this is justified:

We only process publicly available professional information
The data subjects have made this information public in professional contexts
Our customers use this for legitimate business outreach (recruiting, investing, partnerships)
We implement strict data retention limits (90 days)
We provide clear opt-out mechanisms for anyone who objects

AI Processing Disclosure

AgentHuman uses artificial intelligence to analyze data and generate insights. Specifically:

Important Safeguards:

All our AI providers operate under zero data retention agreements
Your data and researched individuals' data are NOT used to train AI models
Human review is built into the process—you control the final output

Accuracy Note: AI-generated insights may contain errors or inaccuracies. We recommend verifying critical facts before relying on them for important decisions.

How Long We Keep Data

We don't store data indefinitely. Here's our retention policy:

Your Account Data: We keep your account information (name, email, job title, company) for as long as your account is active, plus 30 days after account deletion to handle any follow-up needs.

Active Briefings: Research briefings remain accessible while you're an active subscriber.

After Trial Expiration: If you don't subscribe after your trial, your briefings remain accessible for 30 days after trial ends, then are permanently deleted.

After Subscription Ends: Briefings are retained for 30 days after your subscription ends, giving you time to export or re-subscribe.

Automatic Deletion: All lead research data is automatically purged 90 days after your last interaction with that briefing.

Why 90 Days? This gives you enough time for follow-up campaigns while ensuring we don't accumulate data indefinitely. It's a balance between usefulness and privacy.

Rights of Researched Individuals

If you've been researched through AgentHuman and want to exercise your data protection rights:

Right to Know: You can request confirmation of whether we hold data about you and what that data contains.

Right to Correction: If any information we hold about you is inaccurate, you can request correction. We will update or delete inaccurate data within 48 hours of verification.

Right to Deletion: You can request that we delete any data we hold about you. We will process deletion requests within 48 hours.

Right to Object: You can object to our processing of your data. If you object, we will stop processing your data unless we have compelling legitimate grounds.

How to Exercise These Rights: Email privacy@agenthuman.ai with:

Your full name
Your request (access, correction, deletion, or objection)
Any identifying information (company, LinkedIn URL) to help us locate your data

We respond to all requests within 48 hours during business days.

Data Transfers

Where Your Data Goes: Our infrastructure is hosted in the United States. If you're based in the EU or UK, this means your data is transferred outside the European Economic Area.

How We Protect Transfers: We rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure your data receives equivalent protection when transferred to the US.

Our Sub-processors:

database hosting - US
application hosting - US
AI processing - US

All sub-processors are contractually bound to protect your data and operate under appropriate data protection agreements.

Security Measures

We implement appropriate technical and organizational measures to protect the data we process:

Encryption in transit (TLS 1.3) and at rest (AES-256)
Access controls limiting data visibility to authorized users only
Automated data deletion after retention periods
Sub-processor due diligence and contractual protections

Changes to This Section

If we make material changes to how we handle product data, we'll notify active users via email at least 30 days before changes take effect.

About AgentHuman

Who We Are: AgentHuman operates under the trade name "AgentHuman" and is run by Grzegorz Mocko as a sole proprietor (Autónomo) registered in Spain.

Where to Find Us: Our business address is Regus – Diagonal Balmes BC, Avinguda Diagonal 409, 08008 Barcelona, Spain.

How to Reach Us: For any privacy-related questions or to exercise your data protection rights, email us at privacy@agenthuman.ai. We typically respond within 24-48 hours during business days.

Terms of Service: For information about the terms and conditions of using our service, please see our Terms of Service.

Questions or Concerns?

We're here to help with any questions about your privacy or this notice. Whether you want to understand something better, exercise your rights, or just have a general privacy concern, don't hesitate to reach out.

Email: privacy@agenthuman.ai

Response Time: Typically 24-48 hours during business days

Language: We respond in English and Spanish

We're committed to privacy transparency and making sure you feel confident about how your information is handled.