Privacy Policy

Agents24x7 is a trade name of Codpal Limited, a company incorporated in Cyprus (registration number HE 437774), with its registered office at Florinis 7, Greg Tower, 2nd floor, P.C. 1065, Nicosia, Cyprus. For privacy questions, contact [email protected].

Depending on the features you use, we process:

• Account and contact details, such as your name and email address.
• Store, site and product information needed to carry out the work you request.
• Messages, instructions and generated work exchanged with your Agents24x7 agents.
• Integration credentials and settings for services you connect. OAuth access and refresh tokens are encrypted at rest.
• Usage, device and diagnostic information needed to operate, secure and troubleshoot the service.

If you choose to connect Google Search Console, Agents24x7 requests read-only access to the Search Console properties you authorize. We retrieve search queries, pages, clicks, impressions, click-through rates and average positions to help your SEO agent identify relevant content and page improvements.

Search Console performance data is used for the SEO analysis you request and for the optional weekly opportunity review. To produce that work, the agent may send relevant search queries, pages, metrics, or a short summary of identified opportunities to the AI model provider configured for your organisation. The provider processes that information only to generate the requested agent response. Neither Agents24x7 nor its AI service providers use information received from Google APIs to develop, improve or train generalized AI or machine-learning models. For OpenRouter requests, we require providers that deny data collection and support zero data retention; any separately configured model endpoint must meet the same restrictions. We do not send your Google password to the model provider.

OAuth tokens are encrypted at rest and used to make Search Console requests on your behalf. Disconnecting Search Console removes the integration from your agents and stops future reads. You can also revoke Agents24x7's access in your Google Account settings. Search Console data is not retained as a separate analytics dataset by Agents24x7; information included in an agent conversation or task record follows the retention rules for that account data described below.

We use information to provide the features you request, including to:

• operate your account, agents, integrations and subscriptions;
• retrieve and analyse connected service data to prepare agent suggestions and carry out work you approve;
• secure, maintain and troubleshoot the service;
• respond to support requests and meet legal obligations.

We process information on the bases permitted by applicable law, including to perform our contract with you, with your consent where required, to meet legal obligations and for legitimate interests such as service security and reliability.

We share information with service providers that help us host and operate Agents24x7, deliver messages, process payments and provide AI responses. When an agent uses a configured AI model provider, it sends the information needed for that requested model operation, as described above for Search Console. Providers process information under their applicable terms and our service arrangements. We may also disclose information when required by law or as part of a business transfer.

We do not sell connected Search Console data.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

We use access controls and encryption to protect sensitive credentials and other account information. No online service can guarantee absolute security. We retain support chats, messages, daily report rows and question aggregates for 90 days. Open and answered support cases remain until closed; after closure, they are retained for 90 days after their last activity. Durable task inputs and step results are cleared after 30 days; task status history remains. Prior agent memory revisions are kept for 180 days, while the current memory remains until it is changed or deleted. Agent Architect requests for unavailable tools are retained with the organisation and removed when that organisation's data is erased. Shopify compliance request journal rows are kept for two years. Payment, payment-provider event and usage records are kept for six years to meet UK tax record-keeping requirements. We may retain other account records for as long as needed to provide the service, resolve disputes and meet legal obligations. Contact our privacy address for deletion requests; some records must remain where the law requires it.

Information may be processed in countries outside the European Economic Area. Where required, we use an applicable transfer safeguard, such as European Commission standard contractual clauses.

You can disconnect integrations in Agents24x7 and revoke third-party access from the relevant provider account. Depending on your location, you may have rights to access, correct, delete, restrict or receive a copy of your personal information, object to certain processing, or withdraw consent. Contact [email protected] to exercise these rights. You may also complain to your local data protection authority.

An organisation admin can download an account data export from Settings → Privacy. It includes organisation and member profiles, agent settings and memory, chats and messages, Support Agent data, integration types and connection statuses, approvals, work items, customer payment and subscription amounts, and usage percentages. The export manifest lists these categories and its deliberate exclusions. Integration credentials, encrypted fields, secrets and internal model costs are excluded. Contact our privacy address for an access request about your personal information.

To request account data deletion, see our data deletion instructions.

We use essential cookies for sign-in and service operation. Our services are not intended for children under 16, and we do not knowingly collect their personal information. We may update this policy as the service or legal requirements change; the date above shows when it was last revised.