Privacy policy

This Privacy Policy applies to personal information processed by Agnotiq in connection with:

• the Agnotiq website and any related domains;
• demo requests, contact forms, newsletters, events, webinars, and other marketing interactions;
• customer and prospect communications;
• product, trial, pilot, and implementation activities;
• support, security, analytics, and operational activities tied to the service.

This Privacy Policy does not apply to personal information that Agnotiq processes solely on behalf of a customer as a service provider or processor under a separate customer agreement or data processing addendum. In those cases, the customer's privacy notices and contractual terms govern the relevant processing, except where Agnotiq has independent legal obligations.

Agnotiq provides AI-driven workflow automation and agentic workflow infrastructure for B2B teams, particularly operations, IT, customer, and revenue teams that want governed, visible, and reliable automation across existing business systems.

For the purposes of applicable privacy law, the organization responsible for website and business-contact data is Agnotiq.

Agnotiq may collect the following categories of personal information, depending on how a person interacts with the website, services, or business team.

A. Information provided directly

• name, business email address, phone number, company name, job title, and other contact details;
• information submitted in forms, demo requests, surveys, event registrations, or support requests;
• communications content, attachments, and records of correspondence with Agnotiq;
• account, onboarding, billing, or contracting information where relevant.

B. Information collected automatically

• device information, browser type, operating system, IP address, approximate location inferred from IP, referral URLs, pages viewed, links clicked, and timestamps;
• cookie, pixel, tag, and similar technology data;
• usage, diagnostic, telemetry, and log information relating to website or service interactions;
• security-related event data, such as login attempts, session activity, and abuse-prevention signals.

C. Information from third parties

• analytics, advertising, CRM, marketing automation, customer support, and communications providers;
• publicly available business sources, enrichment vendors, or referral partners;
• customers and implementation stakeholders who provide user or contact details in connection with sales, onboarding, support, or service delivery.

D. Customer data

Where customers use Agnotiq to automate workflows across business systems, Agnotiq may process personal information contained in customer data, prompts, workflow inputs, system records, uploaded files, communications, and outputs generated through the service. In those situations, Agnotiq generally acts as a service provider or processor on the customer's behalf, subject to the governing contract and documented instructions, unless applicable law requires otherwise.

Agnotiq may use personal information to:

• provide, operate, maintain, secure, and improve the website, platform, and related services;
• respond to inquiries, schedule demos, provide resources, and communicate with prospects and customers;
• manage accounts, onboarding, implementation, support, and customer success activities;
• authenticate users, monitor usage, troubleshoot issues, and protect against fraud, abuse, or security incidents;
• analyze trends, measure engagement, improve performance, and understand product and website effectiveness;
• personalize content, marketing, and communications where permitted by law;
• comply with legal obligations, enforce agreements, establish or defend legal claims, and protect rights, safety, and property;
• develop aggregated, de-identified, or anonymized insights where permitted by law.

Agnotiq's product emphasizes workflow execution, governance, integration, approvals, visibility, and operational oversight; accordingly, privacy and security- related processing may include logging, permissions management, oversight controls, and implementation support needed to operate governed automation environments.

Agnotiq structures its privacy practices to align with applicable Canadian and U.S. privacy laws. In Canada, private-sector organizations handling personal information in the course of commercial activity are commonly subject to PIPEDA, depending on the jurisdiction and data flows.

Where required by applicable law, Agnotiq may rely on one or more recognized grounds for collection, use, and disclosure, such as consent, reasonable business purposes, contractual necessity, legal compliance, fraud prevention, security, and related operational needs. Where Agnotiq processes customer data on behalf of customers, the customer is typically responsible for providing required notices and obtaining any necessary permissions from its end users, employees, or other data subjects.

Agnotiq may use cookies, SDKs, pixels, local storage, and similar technologies to operate the website and service, remember preferences, analyze traffic, measure campaign performance, and improve user experience.

These technologies may include:

• strictly necessary technologies required for site functionality, security, and fraud prevention;
• analytics technologies used to understand traffic, navigation, engagement, and performance;
• functional technologies used to remember preferences or support enhanced experiences;
• advertising or campaign measurement technologies, if used.

Where required by law, Agnotiq will provide notice and any required choices regarding non-essential cookies or similar technologies. Users can also control cookies through browser settings, though some site features may not function properly if certain cookies are disabled.

Agnotiq may disclose personal information to the following categories of recipients:

• service providers and subprocessors that support hosting, infrastructure, analytics, communications, CRM, support, security, billing, and other business operations;
• professional advisors such as lawyers, auditors, insurers, and consultants;
• affiliates or corporate group entities, where applicable;
• law enforcement, regulators, courts, or other third parties when required by law or reasonably necessary to protect rights, safety, security, or property;
• relevant parties in connection with an actual or proposed merger, acquisition, financing, reorganization, asset sale, or similar corporate transaction.

Agnotiq does not sell personal information in the ordinary meaning of the term. If any activity under applicable U.S. privacy law is considered a “sale” or “sharing” for cross-context behavioral advertising, Agnotiq will disclose that practice here and provide any required opt-out rights before publication.

Because Agnotiq provides AI-enabled workflow automation across business systems, personal information may be processed through features that ingest inputs, connect with third-party systems, analyze context, route tasks, generate summaries, update records, escalate issues, or produce workflow outputs.

Agnotiq may use logs, operational metadata, and similar information to monitor service performance, maintain security, troubleshoot issues, and improve system reliability. Agnotiq will clearly disclose before publication whether customer content, prompts, or outputs are used to train Agnotiq-owned models, improve third-party models, or fine-tune product systems, and customers will be offered contractual clarity on these practices where relevant.

If Agnotiq uses automated decision-making in a way that triggers additional legal obligations under applicable law, this Privacy Policy and related customer terms will be supplemented with clearer disclosures about the relevant processing and available rights.

Agnotiq retains personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide services, maintain records, comply with legal obligations, resolve disputes, enforce agreements, and protect rights and security.

Retention periods may vary based on the type of data, the nature of the relationship, contractual commitments, sensitivity, operational need, and legal requirements. A more specific retention statement or schedule for key data categories — such as marketing contacts, support records, product telemetry, account data, and customer content — will be inserted before publication.

Agnotiq uses technical, organizational, and administrative safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure. The platform is built on a server-component-first web stack, hosted application infrastructure, provider abstractions, Supabase-based data services, row-level security controls, and service-layer separation — a security-conscious operational design, though not by itself a guarantee of any specific security standard or certification.

No method of transmission over the internet or electronic storage is completely secure. For that reason, Agnotiq cannot guarantee absolute security, but it works to maintain safeguards appropriate to the nature of the data and the risks involved.

Personal information may be stored and processed in Canada, the United States, or other countries where Agnotiq or its service providers operate infrastructure, personnel, or subprocessors. Canadian privacy authorities note that cross-border processing may result in personal information being subject to lawful access by foreign courts, law enforcement, or regulators, depending on where the information is processed.

Agnotiq will describe any significant cross-border hosting or vendor arrangements accurately before publication, especially where customer or website data is routinely processed outside Canada.

Depending on location and applicable law, individuals may have the right to:

• request access to personal information;
• request correction of inaccurate personal information;
• request deletion of personal information, subject to exceptions;
• withdraw consent where processing is based on consent, subject to legal or contractual limits;
• opt out of certain targeted advertising, sale, sharing, or profiling activities where applicable under U.S. state privacy laws;
• receive information about categories of personal information collected, sources, purposes, and disclosures, where required by law;
• not be discriminated against for exercising applicable privacy rights.

Agnotiq may need to verify identity before fulfilling a request and may limit its response as permitted by law. Where Agnotiq processes personal information on behalf of a customer, requests relating to that data should usually be directed to the relevant customer, which controls the processing.

A. Canada

Canadian private-sector privacy law generally applies to organizations handling personal information in the course of commercial activities, and PIPEDA commonly applies across Canada, including to cross-border processing and to many businesses operating in Ontario.

For Canadian residents, Agnotiq aims to collect, use, and disclose personal information only for appropriate business purposes, with suitable safeguards and access and correction rights subject to applicable legal exceptions. Personal information may be processed outside Canada and may be accessible to foreign authorities where permitted by law.

B. United States

Residents of certain U.S. states may have privacy rights relating to access, deletion, correction, and opting out of certain uses of personal information, depending on the applicable state law and Agnotiq's legal obligations. California's CCPA, as amended, provides rights including the right to know, delete, correct, opt out of the sale or sharing of personal information, limit certain uses of sensitive personal information, and receive non- discriminatory treatment for exercising applicable rights.

As Agnotiq becomes subject to additional state-specific privacy laws, this Privacy Policy will be supplemented with any required notices at collection, request methods, appeals information, and disclosures about sensitive personal information and targeted advertising practices.

Agnotiq may send newsletters, event invitations, product updates, and other marketing communications consistent with applicable law and user preferences. Recipients can unsubscribe using the link in the message or by contacting Agnotiq.

Transactional or service-related communications may still be sent where necessary for account administration, security, support, or contractual performance.

Agnotiq's website and services are intended for business users and are not directed to children. Agnotiq does not knowingly collect personal information from children where prohibited by law.

If Agnotiq learns that it has collected personal information from a child in violation of applicable law, it will take appropriate steps to delete that information.

The website or service may contain links to third-party websites, integrations, tools, content, or services. Agnotiq is not responsible for the privacy practices of third parties, and individuals should review the privacy policies of those third parties before providing information or using their services.

Where Agnotiq integrates with customer-selected or Agnotiq- supported third-party systems, the handling of data by those systems will also be governed by the applicable third-party terms and privacy notices.

Agnotiq may update this Privacy Policy from time to time to reflect changes in the law, the business, the services, privacy practices, or technology stack. When required, Agnotiq will provide notice of material changes through the website, product, email, or other appropriate means.

The “Last Updated” date at the top of this Privacy Policy indicates when the current version became effective.

Questions, requests, and complaints regarding this Privacy Policy or Agnotiq's privacy practices should be directed to the Agnotiq Privacy Team.