Privacy & cookies notice

1. Who is responsible?

The data controller for personal data processed through this site and the AgenticHosting product is the legal entity operating AgenticHosting (“we”, “us”). If you need the registered name, address, and registration details, use the business identity published on your deployment or contract, or contact us using the details in Contact.

2. Scope

This notice covers our websites, dashboards, APIs, and related communications (for example transactional email). Third-party sites and services that we link to (such as a payment provider checkout page) are governed by their own policies when you leave our environment.

3. Personal data we process

Depending on how you use AgenticHosting, we may process categories such as:

• Account and contact data — for example name, email address, organization, and credentials managed through our authentication provider.
• Billing data — limited billing and subscription metadata processed by our payment provider; we generally do not store full payment card numbers on our servers.
• Service and technical data — configuration you provide (for example SSH public keys), server identifiers, logs, security signals, diagnostics, and usage metadata needed to operate the platform.
• Support and communications — content you send when you contact us.

4. Purposes and legal bases (GDPR)

We rely on the following legal bases where the GDPR applies:

• Contract — providing the service you request, provisioning infrastructure, authentication, billing, and account management.
• Legitimate interests — securing the platform, detecting abuse, improving reliability, limited analytics compatible with ePrivacy rules where applicable, and internal reporting, balanced against your rights.
• Legal obligation — compliance with applicable law, tax, and regulatory requests.
• Consent — non-essential cookies and similar technologies, and marketing communications where consent is required.

5. Cookies and similar technologies

We use cookies (small text files on your device) and similar storage (such as localStorage) where needed to run the site and, only with your permission, for optional purposes.

5.1 Strictly necessary

These are required for core functionality such as keeping you signed in, maintaining security, routing requests, and remembering essential session state. They are used based on our legitimate interest and/or the performance of a contract, depending on context, and do not depend on consent in most EU/UK interpretations.

5.2 Optional categories

Unless you allow them via the cookie banner (or equivalent control), we do not activate optional analytics or marketing technologies. Your choices are stored locally (for example under the key agentichosting_cookie_consent_v1) so the site can respect them on return visits.

• Preferences — remember non-essential choices such as UI options where we offer them.
• Analytics — measurement to improve the product (for example aggregated usage).
• Marketing — campaign measurement and, if applicable, personalized advertising.

You can change or withdraw consent anytime using Cookie settings in the site footer, which opens the same preference panel as the banner.

6. Recipients and processors

We use carefully selected service providers to host, authenticate, bill, email, and operate infrastructure. They process data on our instructions and under contractual safeguards. Categories may include cloud hosting, database and authentication providers, payment processors, email delivery, observability, and infrastructure partners.

7. International transfers

Your data may be processed in countries outside your own, including outside the EEA/UK. Where required, we implement appropriate safeguards such as Standard Contractual Clauses and supplementary measures, and we assess transfer risks in line with applicable law.

8. Retention

We keep personal data only as long as needed for the purposes above, including legal, accounting, and security requirements. Retention periods vary by data type; backup copies may persist for a limited period after deletion from active systems.

9. Your rights

Where the GDPR (or similar laws) applies, you may have rights to access, rectify, erase, restrict, or port your personal data, and to object to certain processing. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. You may also lodge a complaint with a supervisory authority.

10. Security

We implement appropriate technical and organizational measures designed to protect personal data. No method of transmission or storage is completely secure; we work to reduce risk in line with industry practice.

11. Children

AgenticHosting is not directed at children, and we do not knowingly collect personal data from children without appropriate parental authority.

12. Changes

We may update this notice from time to time. Material changes will be highlighted reasonably (for example by updating the date above or showing a short notice). When we change optional tracking, we may ask you to renew consent where the law requires.

13. Contact

For privacy requests or questions about this notice, contact us using the business details published for your deployment. You may also email [email protected].