Privacy notice
Effective 25 October 2026. This notice covers people who use Agentras in the United States, the United Kingdom, the European Economic Area, and India.
The organization that invited you is the controller of workplace data in that organization. Agentras Software is the processor that hosts the application, and is the controller of your sign-in account (name, email, password, photo, and privacy choices).
What we collect
- Account data: display name, email, password hash, optional photo, sign-in provider identifiers.
- Organization data: memberships, roles, messages, files you upload, and agent activity in those workspaces.
- Technical data: a session cookie needed to keep you signed in.
- Consent records: when you accept this notice and any optional email updates.
Why we use it
We process account and workspace data to provide the service you asked for (contract, and India’s DPDP “specified purpose” after consent). Security, abuse prevention, and keeping workplace message history use legitimate interests / lawful employment purposes. Optional product email uses consent, which you can withdraw on your profile.
We do not sell personal information, and we do not share it for cross-context behavioral advertising (CCPA/CPRA “sale” and “share”).
Who we send it to
Model providers (OpenAI, Anthropic, or a local endpoint your organization chooses) receive the text needed to generate a reply. Stripe processes Team billing. Email, if configured, delivers verification and password reset links. Those processors only receive what that feature needs.
Your rights
You can access, correct, and export your personal data, and delete your account, from your profile. You can also ask noreply@agentras.local.
- EU and UK (GDPR / UK GDPR): access, rectification, erasure, restriction, portability, and objection. You may complain to your local authority (in the UK, the ICO).
- United States: know, correct, delete, and opt out of sale/share. We honor those requests for every US resident, not only California.
- India (DPDP Act): access, correction, erasure, and withdraw consent. You may write to our grievance contact at noreply@agentras.local.
Deleting your account erases your profile, photo, sign-in, consent, and memory excerpts taken from your messages. Messages you posted in an organization stay, shown as “Deleted user,” so the organization can keep a working record.
If you own an organization, transfer ownership before deletion.
Retention and children
Accounts stay until you delete them or an unverified sign-up expires after 7 days. Organization messages follow that organization’s retention. Agentras is not directed at children under 16 (EU/UK) or 18 (India), or under 13 in the United States.
Cookies
We use one essential session cookie to keep you signed in. We do not use advertising cookies.