Last updated: June 2026 · Version 2.1 · InfrAgent AI Ltd
Summary for convenience; the full policy below governs.
InfrAgent AI Ltd ("we") runs a multi-tenant AI communication platform across WhatsApp, Instagram, Facebook, Gmail, website chat and inbound calls, and is registered with the UK ICO. For data about you and your business (account, billing, settings) we are the controller. For your customers' data flowing through the platform (messages, call recordings, bookings, contacts) you are the controller and we act only as your processor under our Data Processing Agreement.
Account data (name, email, business name, industry, phone, billing); knowledge-base content you upload to train your AI; communication data we process on your behalf (customer messages, call audio/transcripts, bookings, leads); technical data (IP, device, usage logs) needed to run and secure the service; and consent records (who accepted which document, when, from which IP).
To perform our contract (running your AI, routing messages, processing bookings and payments); for legitimate interests (security, abuse prevention, aggregated non-identifying analytics); with your consent (optional marketing, withdrawable any time); and to meet legal obligations (tax, accounting, lawful requests). We do not sell personal data and do not use your data or your customers' conversations to train shared or third-party AI models.
Your customers' messages are processed only to provide the service to you, stored in a per-tenant partition enforced by database row-level security, and never used for cross-tenant profiling or model training. AI replies are generated by OpenAI models via API (which, under OpenAI's API terms, are not used to train their models), constrained to your knowledge base. Calls are transcribed and synthesised for the voice agent; low-confidence conversations and explicit requests escalate to a human, so no legally significant decisions are fully automated.
We use a small set of vetted sub-processors, each under a data-processing agreement: Supabase (database/auth), OpenAI (AI text, image, speech via API), Twilio (telephony/SMS), Meta (WhatsApp/Instagram/Messenger APIs), Google (Gmail API), Stripe (payments — we never store card numbers) and Hetzner (EU server hosting, Germany). The current list is available on request; material changes are notified in advance.
Primary hosting is in the EU (Germany). Where data goes to US-based sub-processors (e.g. OpenAI, Twilio, Stripe) we rely on the UK International Data Transfer Addendum and EU Standard Contractual Clauses. Account data is kept while your subscription is active; conversation data stays in your tenant until you delete it. After account closure, tenant data is deleted within 30 days, except minimal records required for legal, tax or fraud purposes. Backups are encrypted and expire on a rolling schedule.
Data is encrypted at rest (AES-256-GCM) and in transit (TLS 1.3). Tenant isolation uses Postgres row-level security. Production access is restricted, logged and MFA-protected. Webhooks from Meta, Twilio and Stripe are signature-verified. ISO 27001 / SOC 2 are in progress, and we run a responsible-disclosure programme (see our Security page).
Under UK/EU GDPR you can access, rectify, erase, restrict, object to, and port your data, and withdraw consent any time. Under India's DPDP Act you can access a summary of your data, request correction/erasure, seek grievance redressal, and nominate someone to act for you. Email support@infragentai.com — we respond within one month — or delete most data yourself in Settings. There's no charge unless a request is manifestly excessive.
We use strictly necessary cookies for login/sessions and privacy-respecting analytics — no third-party advertising cookies; non-essential cookies are used only with consent (PECR/ePrivacy). The platform is a business tool not directed at under-18s. If a personal-data breach poses a risk to individuals, we notify the ICO (and other applicable authorities) without undue delay and within 72 hours where feasible, and inform affected tenants promptly.
Contact us first at support@infragentai.com. You may also complain to the UK ICO (ico.org.uk), your EU supervisory authority, or the Data Protection Board of India. We may update this policy as the service or law evolves, with at least 14 days' notice of material changes by email and in-app. Data-protection enquiries: INFRAGENT AI LIMITED, 28 Baden Road, Ilford, IG1 2HS, United Kingdom · support@infragentai.com (subject "Privacy").
INFRAGENT AI LIMITED
Registered office: 28 Baden Road, Ilford, IG1 2HS, United Kingdom
Registered in England & Wales
Phone: +44 7459 243752
Email: support@infragentai.com
© 2026 INFRAGENT AI LIMITED · Registered in England & Wales. All rights reserved.