Log In Get Started
Privacy

Privacy Policy

Last updated · 23 May 2026

Contents

  1. Scope & controller
  2. Data we collect
  3. How we use data
  4. Sharing & processors
  5. Retention
  6. Your rights
  7. Security
  8. Cookies
  9. International transfers
  10. Changes & contact

01Scope & controller

This policy applies to agentics.co.za and every Agentics product surface (mobile app, watch, desktop companion, Studio, Console, CLI, Shield). The data controller is AgenticsAI (Pty) Ltd, Registration 2026/230193/07, Johannesburg, South Africa.

02Data we collect

We collect only what is necessary to provide the service, bill it correctly, and meet legal obligations.

  • Account data: name, email, password hash, banking and payout details, KYC information for higher tiers.
  • Usage data: API requests, generations, voice minutes, embeddings stored, tokens consumed.
  • Content data: conversations and content you submit to Agentics services, stored only as long as required for the feature you used (NRN excluded, see Retention).
  • Device data: IP, user agent, locale, device fingerprint where Shield is enabled.

03How we use data

We use data to operate the service, generate completions and other outputs on your behalf, prevent abuse, process payments, send transactional notifications, and improve the product. We do not sell your data, ever.

04Sharing & processors

We share data with a tightly scoped set of processors, all bound by data processing agreements: payment processors (Stitch, Yoco, Paystack, Coinbase Commerce), email delivery (Postmark), cloud infrastructure (AWS), and analytics (PostHog, Clarity). No third party processor accesses content data without explicit user action.

05Retention

API request payloads are retained for 30 days for abuse review. NRN-stored memories live for as long as your account is active, plus 30 days. Financial records are retained for the period required by SARS and the Companies Act. Deletion requests under section 06 are honoured within 30 days, subject to legal hold.

06Your rights

Under POPIA, GDPR, and CCPA you have rights of access, rectification, deletion, restriction, portability, and objection. Submit requests to [email protected]. Use delete account for instant self service erasure of personal data.

07Security

Data is encrypted in transit (TLS 1.3) and at rest (AES-256). Frontend code is wrapped with Shield where activated. Internal access is on-call rotated, MFA enforced, with full audit logging.

08Cookies

We use only strictly necessary cookies for authentication and session state, plus a single first-party analytics cookie for product telemetry. No tracking pixels, no third-party advertising cookies, no cross-site identifiers.

09International transfers

Primary processing happens in South Africa. Backups and certain inference may be processed in the EU and US. All transfers use Standard Contractual Clauses or equivalent safeguards.

10Changes & contact

Material changes will be notified by email at least 14 days before they take effect. Questions: [email protected] or +27 64 525 7077.