Privacy Policy
Effective Date: October 13, 2026 • Last Updated: October 2026
At A²gency ("we," "our," or "us"), your privacy and data security are foundational principles. This Privacy Policy details how we collect, process, and protect your information when you interact with our website, access our AI agent platforms, and use our services.
1. Core Functionality
Essential data used to authenticate your identity, maintain secure sessions, manage accounts, and deliver our bespoke autonomous AI agents and workflows.
Learn more →2. Security & Compliance
Proactive security monitoring, automated fraud mitigation, rate-limiting enforcement, and legal compliance to preserve platform integrity.
Learn more →3. Performance Analytics
Aggregated diagnostics and site traffic metrics strictly through Google Analytics (no session recording or third-party ad pixels).
Learn more →4. Marketing & Re-engagement
Relevant product updates, consultation follow-ups, and opt-in announcements for users who request demos, consultations, or newsletters.
Learn more →01Information We Collect
We collect information that you directly provide when you interact with our website, create an account, register for our services, request a demo, or book an appointment.
- Contact & Profile Information: Name, professional email address, organization name, role, phone number, and appointment preferences.
- Account Credentials: Email address and encrypted authentication tokens managed securely through Firebase Authentication.
- AI Agent Configuration Data: Brand guidelines, marketing targets, creative preferences, and strategic instructions you input into our agent builders.
- Technical Telemetry: Anonymized device type, operating system, browser specifications, and timestamp metrics collected to maintain system stability.
02Core Functionality & User Authentication
We process your personal information to establish, deliver, and maintain the primary services and features of A²gency:
User Authentication & Session Management
We use Firebase Authentication to authenticate users, manage identity lifecycles, enforce multi-factor authentication where applicable, and maintain authorized session tokens across our dashboard and interactive AI workspaces.
Bespoke Agent Execution & Workflows
Data entered into our agent builders (such as brand identity parameters, campaign goals, and prompts) is processed by our backend engine to orchestrate autonomous agents, generate tailored marketing deliverables, and provide real-time strategic assistance.
Transactional & Operational Communications
We send essential transactional notifications, including password resets, account verification confirmations, appointment reminders, and important platform service advisories.
03Security, Compliance, and Fraud Detection
Maintaining the resilience, safety, and trustworthiness of our infrastructure is critical. We process personal and technical data for the following defensive purposes:
Fraud Detection & Abuse Prevention
Detecting and intercepting malicious activities, automated credential attacks, scraping, and abusive usage of our generative AI endpoints.
Audit Trails & Infrastructure Integrity
Recording security logs, API invocation records, and access traces within Google Cloud Platform to maintain strict operational auditing and forensic readiness.
Access Control & Rate Limiting
Enforcing role-based access controls and rate-limits to protect system availability against distributed denial-of-service (DDoS) threats.
Regulatory & Legal Compliance
Satisfying statutory data protection obligations, complying with lawful requests from public authorities, and enforcing our terms of service.
04Performance Analytics
Sole Active Measurement Tool: Google Analytics
We currently do not use any session recording, heatmapping, or invasive third-party telemetry tools on A²gency. Our only active measurement tool is Google Analytics, operated by Google LLC.
Google Analytics collects aggregated, pseudonymous statistics to help us evaluate site performance, diagnose page load latencies, understand navigation pathways, and optimize the overall user experience.
What Google Analytics Collects:
- Aggregated page visit counts, average session durations, and bounce rates
- Generalized geographic location (country- or city-level, with IP anonymization enabled)
- Browser type, operating system, screen dimensions, and referring websites
- Technical performance metrics (Core Web Vitals, load times, script execution delays)
Third-Party Privacy Policies & Opt-Out Options:
Google processes analytics data in accordance with their own comprehensive privacy frameworks. We encourage you to review their practices and opt-out controls:
Details on Google data processing and security standards.
Overview of data collected from partner websites and apps.
Terms governing data handling under Google Analytics.
Official browser add-on to disable Google Analytics tracking.
05Marketing and Re-engagement
When you engage with our agency — whether by scheduling a consultation, submitting an inquiry via our contact forms, signing up for newsletters, or registering an account — we may use your contact details to provide targeted updates and re-engagement messaging:
Consultation Follow-ups & Demo Coordination
Directly following up on appointment bookings to align on your enterprise requirements, prepare architectural recommendations, and demonstrate relevant agent capabilities.
Product Updates & Feature Releases
Informing subscribers about new autonomous agent modules, enhanced integration connectors, security advisories, and agency announcements.
Re-engagement & Industry Insights
Sharing curated marketing insights, agent benchmarks, and thought leadership designed to help your team maximize automation productivity.
07Data Retention & Security Measures
We retain your data only for as long as is necessary to provide you with services, fulfill the purposes described in this policy, resolve disputes, and comply with legal obligations.
We implement industry-standard administrative, physical, and technical safeguards, including TLS encryption for data in transit, AES-256 encryption at rest, secure key management via Google Secret Manager, and strict role-based access control (RBAC).
08Your Privacy Rights & Choices
Depending on your jurisdiction (including under GDPR, UK GDPR, and California Privacy Rights Act), you have enforceable rights regarding your personal information:
Right of Access & Portability
Request a copy of the personal information we maintain about you in a structured, machine-readable format.
Right to Rectification & Erasure ("Right to be Forgotten")
Self-Service Deletion Portal (/forgetme) →You have the right to request the permanent deletion of your personal information, credentials, and custom AI agent configurations. To ensure security and prevent unauthorized or fraudulent account wipeouts, we require a verified two-step confirmation process:
1. Submission: Enter your registered email address and any specific deletion instructions on our /forgetme page.
2. 20-Minute Identity Verification: A confirmation email containing a time-limited verification link (strictly valid for 20 minutes) will be dispatched to your email address.
3. Database Registration & Data Team Processing: Upon clicking the verification link, receipt of your deletion request is confirmed, recorded in our database, and queued for our data engineering team to purge all associated logs, credentials, and datasets.
Right to Restrict or Object
Object to our processing of your information for direct marketing or legitimate interest rationales.
Right to Withdraw Consent
Withdraw consent previously granted for analytics cookies or promotional subscriptions at any time.
09Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our privacy compliance team: