AGENT - X PRIVACY POLICY

1. Introduction

Agent-X LLC ("Agent-X", "we") is committed to protecting the privacy and data security of all Customers, Partners, and Users ("you") when accessing or using the Agent-X SaaS platform in Vietnam and globally. This Privacy Policy explains how we collect, use, share, store, and protect your information, as well as the choices you have regarding your personal data.

2. Scope of Application

This policy applies to all services, websites, mobile applications, APIs, and related products operated by Agent-X LLC (collectively referred to as "Services"). By accessing or using the Services, you agree to the terms stated herein. If you do not agree, please stop using the Services.

3. Information We Collect

We do not intentionally collect sensitive data (e.g., health status, religion) unless required by law or you actively provide it with explicit consent.

4. Purpose of Data Use

We process your data to:

1. Provide and maintain Service: authenticate users, process payments, display dashboard, and operate AI Agent.
2. Improve performance & experience: analyze logs, survey feedback, customize interface.
3. Support & customer care: respond to requests, fix errors, send maintenance notifications.
4. Security & fraud prevention: prevent unauthorized access, investigate violations.
5. Permitted marketing: send emails about new features, promotions, news, if you have agreed to receive.
6. Legal compliance: fulfill accounting, tax obligations, or legal requests from authorities.

5. Legal Basis (EEA/UK Customers)

For users in the European Economic Area and United Kingdom, we process data based on:

• Contract performance (Article 6.1.b GDPR) – to provide the Service.
• Legitimate interests (Article 6.1.f GDPR) – security, product improvement.
• Consent (Article 6.1.a GDPR) – for marketing or optional data collection.
• Legal obligation compliance (Article 6.1.c GDPR).

6. Information Sharing & Disclosure

We only share data when necessary and follow the principle of minimization:

We do not sell personal data to third parties.

7. Cookies & Tracking Technology

Agent-X uses cookies, pixels, and local storage to:

• Remember login sessions, interface preferences.
• Analyze traffic to improve performance.
• Target advertising if you consent.

You can manage cookies through browser settings or selection banner when visiting the website.

8. Data Storage & Security

• Infrastructure: Servers meeting ISO 27001 standards, located in Singapore, Japan, and the United States, with multi-region backup.
• Encryption: Data in transit via TLS 1.3; sensitive data at rest encrypted with AES-256.
• Internal processes: Zero-trust principle, RBAC permissions, periodic testing.
• Audit: Periodic pentest, PCI-DSS compliance (for payments) and ISO/IEC 27701 standards.

9. International Transfer

If data is transferred outside your country of residence, we protect it through:

• Standard Contractual Clauses (SCC) for EU/UK.
• Compliance with Vietnamese law when transferring abroad.
• Equivalent security in destination country.

10. Your Rights

Depending on applicable law, you may:

1. Access personal data.
2. Edit or update information.
3. Delete data ("right to be forgotten") within the scope permitted by law.
4. Restrict or object to data processing.
5. Withdraw consent at any time (does not affect prior legality).
6. Receive data (portable format) and transfer to another provider.
7. File a complaint with local data protection authority.

Contact Section 14 to exercise your rights.

11. Children's Information Security

The Service is not targeted at users under 13 years old. We do not intentionally collect children's data. If we discover children's information, we will delete it immediately unless the law requires storage.

12. Retention Period

We retain data:

• Account & content: throughout your time as a customer + maximum 3 years after termination for dispute resolution, accounting.
• Logs and technical data: maximum 24 months.
• Cookies: 1 – 13 months, depending on type.

After the retention period expires, data will be deleted or anonymized and cannot be recovered.

13. Third-Party Links

The website may contain links to third-party websites/plugins. We are not responsible for their content or privacy practices. You should read their separate policies.

14. Privacy Policy Changes

We may update the policy to reflect legal changes or business operations. Notification:

• Via email or banner in the application, at least 7 days before changes take effect (unless law requires earlier).
• Updated version will clearly state effective date at the beginning of the document.

Continued use of the Service after the effective date means you accept the updates.

15. Data Received from Meta (Facebook, Instagram)

If you use Agent-X Service integrated with Meta platforms (e.g., Facebook, Instagram, Messenger), we may collect information provided by Meta through API, including but not limited to: page ID, display name, messages, comments, or other public information within the scope of permissions you grant.

We only use this data to:

• Respond to messages, automate conversations, or perform services you request.
• Analyze interaction effectiveness or improve user experience.

We do not share, sell, or use Meta data for other purposes beyond what is permitted in Meta's Platform Policy.

Users can revoke access at any time in the Settings and Privacy section of their Facebook or Instagram account.

16. Data Deletion Request

If you want to delete personal data or data collected through Meta (Facebook, Instagram, WhatsApp), please send a request to:

it@agent-x.ai

In the email, please specify:

• Account email
• Agent name
• Type of data you want to delete

We will confirm and delete data within 30 days from receiving a valid request, unless the law requires longer retention.

17. Contact

For any questions, data rights requests, or complaints, please contact:

• Email: it@agent-x.ai

We will respond within 30 days from receiving a formal request.