Privacy Notice

1. Who we are

Agentomate ("we", "us") provides the Agentomate platform for salons, barbershops, and beauty studios. For personal data about our own account holders, website visitors, and prospective customers, Agentomate is the data controller.

For client records that our business customers upload and manage in the platform (their own clients' names, contact details, appointment and visit history, notes), our customer is the controller and Agentomate acts as a processor on their instructions. If you are a salon client, please contact the business you book with in the first instance.

Contact: agentomateapp@gmail.com.

2. Personal data we collect and why

• Account data (name, email, password credentials, business name, business address, phone) — to create and secure your account and provide the Service. Legal basis: performance of a contract.
• Business operating data (staff, services, opening hours, appointments, customer records and notes you enter) — to deliver booking, CRM, and automation features. Legal basis: performance of a contract.
• Booking data from your clients (name, email, phone, chosen service and time) submitted through a public booking page — to create and confirm appointments. Legal basis: performance of a contract / legitimate interests of the business.
• Communications (support messages, email delivery and engagement events such as sends, bounces, and unsubscribes) — to provide support and operate reminders, follow-ups, and campaigns. Legal basis: contract and legitimate interests.
• AI feature inputs and outputs (prompts and generated content) — to provide AI assistant and content generation features. Legal basis: performance of a contract.
• Usage and device data (IP address, browser and device identifiers, pages viewed, timestamps, API request logs) — for security, fraud prevention, troubleshooting, and product improvement. Legal basis: legitimate interests.
• Billing-related data (subscription plan, status, invoice references) — to manage entitlements. Card details are collected and processed by Paddle, not by us. Legal basis: contract and legal obligation.
• Marketing contact data — to send product updates where permitted. Legal basis: consent or legitimate interests; you can opt out at any time.

3. Who we share data with

• Merchant of Record — Paddle.com, for the sale of subscriptions, payments, subscription management, invoicing, and tax compliance.
• Service providers and subprocessors — cloud hosting and database infrastructure, email delivery (Resend), and AI model providers used to power assistant and content features.
• Professional advisers — legal, accounting, and insurance advisers where necessary.
• Authorities — where required by law, regulation, or valid legal process, or to protect our rights and the safety of users.
• Successors — in connection with a merger, acquisition, or sale of assets.

We do not sell personal data.

4. International transfers

Some of our providers operate outside the UK/EEA. Where personal data is transferred internationally, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

5. Retention

We keep account and business data for as long as your account is active and for up to 12 months after closure to handle disputes and support, unless a longer period is required by law (for example, tax records typically kept for 6–7 years). Security and API logs are kept for up to 12 months. Data is then deleted or anonymised. Customers can delete individual client records at any time from within the platform.

6. Security

We apply appropriate technical and organisational measures, including encryption in transit, encryption at rest for stored data, hashed credentials and hashed API keys, row-level access controls that isolate each business's data, role-based permissions, and rate limiting. No system can be guaranteed completely secure.

7. Cookies

We use strictly necessary cookies and similar local storage to keep you signed in and to maintain your session and preferences. We do not use advertising cookies. Any analytics we use is limited to aggregate product usage. You can block or delete cookies in your browser settings, though the Service may not function correctly without essential cookies.

8. Your rights

Subject to applicable law, you have the right to access your personal data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. You can also unsubscribe from marketing at any time using the link in our emails.

To exercise your rights, email agentomateapp@gmail.com. We respond within one month. If you are in the UK/EEA and are unhappy with our response, you may lodge a complaint with your local data protection supervisory authority.

9. Changes

We may update this notice from time to time. Material changes will be communicated in-app or by email, and the "last updated" date above will change. See also our Terms & Conditions and Refund Policy.