Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Account & Profile: your name, email address, username, password (hashed), company name, and account preferences.
• Business & Lead Criteria: the industry, target audience, ideal customer profile (ICP), keywords, and other settings you provide so we can match you with relevant leads.
• Publicly Available Data:to find high-intent leads, we retrieve content that users have chosen to make public on third-party communities and platforms (for example, Reddit) exclusively through those platforms' official, documented APIs. This may include posts, comments, and associated public profile information, and does not include any private or authenticated content.
• Usage & Device Data: IP address, browser type and version, device type, operating system, language setting, and logs of feature usage, timestamps, and frequency.
• Cookies & Tracking: session/essential cookies, analytics cookies, and performance or marketing cookies (see Section 4).
• Transaction Data: billing address, payment method reference (e.g., last four digits of your card), and invoices, processed by our payment providers.

2. How We Use Your Information

We process your information to:

• Provide, maintain, and operate the Services, including identifying and surfacing leads that match your criteria;
• Customize and improve your experience and the relevance of results;
• Process payments, subscriptions, and refunds;
• Secure the Services and prevent abuse such as fraud, spam, and unauthorized access;
• Communicate service announcements, updates, and optional marketing materials (with opt-in);
• Perform analytics, usage monitoring, and platform development; and
• Comply with legal obligations and enforce our Terms of Service.

3. Legal Basis for Processing (EEA/UK)

If you are located in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR / UK GDPR:

• Contractual necessity — to deliver the Services you request;
• Legitimate interests — to secure the Services, improve relevance, and communicate updates;
• Consent — for non-essential cookies and optional marketing; and
• Legal compliance — to meet our lawful obligations.

Where we process publicly available third-party content to identify leads, we do so on the basis of our legitimate interests in connecting businesses with relevant, publicly expressed intent, subject to the safeguards described in Section 6.

4. Cookies & Tracking Technologies

We use cookies, local storage, and similar technologies for the following purposes:

• Essential: required for login, navigation, and secure user sessions;
• Performance: anonymous usage tracking to optimize speed and experience; and
• Marketing / analytics: set by third-party providers such as Google Analytics to understand engagement.

You can manage your preferences through our consent banner or your browser settings. Disabling essential cookies may affect functionality.

5. Data Sharing and Disclosure

We do not sell or rent your personal information. We share it only as follows:

• Service Providers: companies that help us with hosting, payments (e.g., Stripe), analytics, and email delivery, each bound by confidentiality obligations;
• Legal & Safety: to respond to lawful requests, enforce our rights, or prevent harm;
• Business Transfers: in connection with a merger, acquisition, or similar transaction, subject to confidentiality; and
• Aggregate & Anonymized Data: non-identifying data may be used for research and improvement.

6. Publicly Available Content & Third-Party Data

A core part of the Services is identifying leads from content that users have chosen to post publicly on third-party communities and platforms. We obtain and handle such data lawfully and responsibly:

• Lawful API access — not scraping:public content is retrieved exclusively through the official, publicly documented APIs of each platform (for example, the Reddit API). We do not scrape, crawl, or harvest data through unauthorized or private access, and we comply with each platform's API terms and applicable law.
• Public content only: we retrieve only content that users have affirmatively chosen to make publicly available. Private, authenticated, or deleted content is never accessed or stored.
• Consumer evidence you provide:you may upload or connect "consumer evidence" (for example, customer testimonials, reviews, or purchase/consumption proof) to build social-proof campaigns. This content is processed solely to provide the features you enable, is stored privately within your account, is not shared with other customers, and is not used to train our models. You are responsible for ensuring you have the necessary rights to provide such content.
• Your account content stays private: information you submit within your Agenmatic account (business criteria, saved leads, exports, and consumer evidence) is private to you and is not used to train our models.
• Rights of data subjects: if you are an individual whose public content has been processed by the Services and you wish to access, correct, or request removal of that reference, you may contact us at the address in Section 14 and we will respond in accordance with applicable law.

7. International Data Transfers

Because the Services are operated globally, your data may be transferred to and processed in countries other than your own (for example, the United States, EEA, or United Kingdom), where our facilities or processors are located. When such transfers involve personal data from the EEA or UK, we rely on appropriate safeguards such as the EU Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement.

8. Data Retention

We retain personal data only as long as necessary to provide the Services, maintain your account, meet legal obligations (such as tax and dispute resolution), and protect against fraud and abuse. Thereafter we delete or anonymize the data, unless we are legally required to keep it longer.

9. Your Rights & Choices

Depending on your region, you have the right to:

• Access and download the personal data we hold about you;
• Correct or update inaccurate data;
• Request deletion of your account and associated personal data;
• Receive your data in a portable, machine-readable format;
• Object to or restrict certain processing, such as marketing or profiling; and
• Withdraw consent for non-essential cookies at any time.

To exercise these rights, contact us using the details in Section 14. We will respond within the timeframes required by applicable law and may need to verify your identity.

10. Children's Privacy

The Services are not directed to individuals under the age of 16 (or the minimum age in your jurisdiction). We do not knowingly collect personal data from minors. If you believe we have unintentionally done so, please contact us so we can delete it.

11. Data Security

We implement industry-standard technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, role-based access controls, and monitoring for unauthorized activity. While no system can be guaranteed completely secure, we are committed to notifying affected users and regulators of any breach as required by law.

12. Third-Party Links

The Services may contain links to third-party websites, communities, or APIs (including the platforms from which publicly available content is sourced). We do not control those services and are not responsible for their privacy practices. We encourage you to review their policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where required, notify you of material changes by email or in-product notice.

14. Contact Us

For any privacy-related questions or to exercise your rights, contact us at support@agenmatic.ai.