Ajentic Privacy Policy

Effective date: September 16, 2026
Last updated: September 16, 2026

This Privacy Policy explains how Imversion Technologies, doing business as Ajentic ("Ajentic," "we," "us," or "our"), collects, uses, discloses, and protects personal information when you use our websites, applications, APIs, AI-powered customer-support tools, and related services (collectively, the "Services").

This Policy also explains how Ajentic handles information received through Google Sign-In.

1. Scope and our role

This Policy applies when Ajentic determines why and how personal information is processed, such as for account registration, billing, security, and our own website operations.

An organization may use Ajentic to process its customer-support messages, documents, end-user details, and other Customer Content. For that information, the organization is generally the controller or business and Ajentic is its processor or service provider. The organization's privacy notice governs its collection and use. Requests about that information should first be directed to the organization.

This Policy does not govern third-party websites or services that have their own privacy policies.

2. Information we collect

Information you provide

Depending on how you use the Services, we may collect:

• Account and profile information: name, email address, password verifier, email-verification status, organization, workspace, role, and preferences.
• Customer Content: support conversations, chat messages, prompts, AI-generated responses, uploaded documents, knowledge-base content, citations, metadata, configuration, and other material submitted to the Services.
• Business and contact information: company name, job information, and communications with support, sales, or us.
• Billing information: billing contact and email, legal name, billing address, tax information, subscription, invoices, usage, credits, and limited payment-method details. Full card details are generally collected directly by our payment processor, not Ajentic.
• Feedback and survey information: information you choose to provide when evaluating the Services.

Information collected automatically

We may automatically collect:

• Device and log information: IP address, browser and device type, operating system, timestamps, request or correlation identifiers, referring pages, and diagnostic logs.
• Usage information: features used, pages or screens viewed, interactions, workspace activity, chat and AI operation metadata, token or credit usage, and performance or error information.
• Security information: sign-in events, authentication and session data, fraud signals, and records needed to investigate suspected abuse.
• Cookies and similar technologies: cookies or local storage needed for authentication, security, preferences, and service operation, plus optional analytics technologies if disclosed through an applicable consent tool.

Information received from organizations and integrations

We may receive information from the organization that provides your access, its administrators and users, invited collaborators, connected services, and vendors that help us operate the Services.

3. Google Sign-In and Google user data

If you choose "Sign in with Google," Ajentic receives and processes only the information authorized on Google's consent screen and needed to authenticate or create your Ajentic account. The current sign-in implementation uses:

• your Google account's unique identifier (sub);
• your verified email address and email-verification status; and
• your name, if Google provides it.

Ajentic uses this information to verify your identity, create or locate your account, associate your Google identity with that account, prevent fraud, and issue an Ajentic session. Ajentic does not receive your Google password.

The current Google Sign-In flow does not request access to Gmail, Google Drive, Google Calendar, contacts, or other Google product content. The authorization code or ID token is processed to authenticate you. Ajentic does not currently store Google OAuth access or refresh tokens for this sign-in flow.

If Ajentic later requests additional Google permissions, we will show the requested permissions through Google's consent process and update this Policy before using that additional data.

Ajentic's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

You can remove Ajentic's access through the Google Account permissions page. Revoking Google access prevents future Google authentication but does not by itself delete your Ajentic account or information already retained by Ajentic. To request deletion, use the process in Section 10.

4. How we use information

We use personal information to:

• provide, authenticate, maintain, and support the Services;
• create and administer accounts, organizations, workspaces, memberships, permissions, and feature access;
• process Customer Content, retrieve relevant knowledge, and generate requested AI responses;
• process subscriptions, payments, invoices, credits, and usage;
• send transactional messages, such as account, invitation, password-reset, security, billing, and service notices;
• monitor performance, troubleshoot failures, and improve reliability and user experience;
• secure the Services, enforce acceptable-use rules, and prevent fraud or abuse;
• respond to questions, support requests, and feedback;
• comply with law, enforce agreements, and establish or defend legal claims; and
• send marketing communications where permitted, subject to your opt-out and consent rights.

Ajentic does not use Customer Content to train general-purpose AI models unless the relevant Customer expressly agrees in writing.

5. Legal bases

Where applicable law requires a legal basis, we process personal information:

• to perform a contract, including providing the Services and support;
• for legitimate interests, including security, service improvement, administration, fraud prevention, and business operations, where those interests are not overridden by your rights;
• with consent, such as for certain optional cookies or marketing; and
• to comply with legal obligations and protect legal rights.

Where Ajentic acts as a processor, we process Customer Content under the Customer's instructions and applicable data processing agreement.

6. How we disclose information

We may disclose personal information:

• To the organization using Ajentic: administrators and authorized users may access information associated with their organization or workspace.
• To service providers and subprocessors: hosting, database, storage, communications, email delivery, payment processing, monitoring, analytics, support, document processing, and AI service providers may process information under contract to provide services to Ajentic.
• At your direction: to integrations or third parties you choose to connect.
• For legal and safety reasons: when reasonably necessary to comply with law, lawful process, or valid government requests; enforce agreements; detect or prevent fraud or security incidents; or protect rights and safety.
• For a business transaction: in connection with financing, merger, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality and legal safeguards.
• With consent: for another purpose disclosed when you authorize it.

Production providers may include Google for identity authentication, Stripe for payment processing, cloud hosting and storage providers, email delivery providers, observability providers, and AI or document-processing providers. An up-to-date subprocessor list is available by emailing [email protected].

We do not sell personal information for money. Ajentic does not share personal information for cross-context behavioral advertising unless clearly disclosed and any rights required by law are provided.

7. Data retention

We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, comply with law, resolve disputes, enforce agreements, maintain security and audit records, and preserve legitimate financial records.

Retention depends on the information:

• account and Customer Content is generally retained while the account or Customer agreement is active and for up to 90 days afterward, unless it is deleted sooner or must be retained longer for a lawful reason;
• authentication and password-reset records expire or are deleted according to security settings;
• operational logs are generally retained for up to 90 days;
• backups may retain deleted data for up to 90 days before cycling out; and
• billing, invoice, tax, credit, and transaction records may be retained for up to 7 years or longer where law requires.

Closing an account may first cancel or end subscriptions. Where financial or audit history must be preserved, Ajentic may anonymize identifying account and billing fields after an approved retention period while retaining stable transaction and reconciliation records.

Some information may be retained longer for legal holds, security investigations, or the establishment, exercise, or defense of legal claims.

8. Security

Ajentic uses reasonable administrative, technical, and organizational measures designed to protect personal information. These include access controls, tenant and organization isolation, authentication controls, logging and monitoring, and protections for credentials and session tokens.

No storage or transmission method is completely secure. You are responsible for securing your credentials, configuring user access appropriately, and promptly reporting suspected unauthorized activity to [email protected].

9. International data transfers

Ajentic and its service providers may process information in countries other than the country where you live. Where required, we use recognized transfer mechanisms and safeguards, such as adequacy decisions, standard contractual clauses, and supplementary measures.

10. Your privacy rights and choices

Depending on your location and our role, you may have the right to:

• access or receive a copy of personal information;
• correct inaccurate information;
• delete or request erasure of information;
• restrict or object to certain processing;
• receive portable information;
• withdraw consent without affecting earlier lawful processing;
• opt out of marketing communications; and
• appeal a denied request or complain to a data-protection authority.

To exercise a right, contact [email protected]. We may verify your identity and authority before acting. If your information is controlled by an Ajentic Customer, submit your request to that organization; we will assist the organization as required.

To delete an Ajentic account or disconnect Google Sign-In, contact [email protected]. A deletion request may not immediately remove information that must be retained for security, billing, tax, legal, backup, or audit purposes. We will delete or anonymize eligible information according to applicable law and approved retention schedules.

You may unsubscribe from marketing email using the link in the message. Transactional and security notices cannot be disabled while you use the Services.

11. Cookies

Ajentic may use strictly necessary cookies or similar technologies to keep you signed in, route requests, remember settings, and protect the Services. If we use optional analytics or advertising technologies, we will provide any notice and consent choices required by applicable law.

You may request the current list of cookies, providers, purposes, and durations by emailing [email protected].

12. Children's privacy

The Services are not directed to children under 18, and Ajentic does not knowingly collect personal information from children. If you believe a child has provided personal information, contact [email protected] so we can investigate and take appropriate action.

13. Automated processing

Ajentic uses automated systems and AI to process documents, retrieve information, generate responses, classify or summarize content, and operate customer-support workflows. Output may be inaccurate and should be reviewed before use. Ajentic does not use its Services, on its own behalf, to make decisions producing legal or similarly significant effects about individuals. Customers are responsible for their own workflows and legally required safeguards.

14. Changes to this Policy

We may update this Policy to reflect changes to the Services, law, or our practices. We will post the updated version and revise the "Last updated" date. If changes materially affect your rights, we will provide additional notice where required.

15. Contact us

Questions, requests, and complaints may be sent to:

Imversion Technologies
Attn: Privacy
Email: [email protected]
Website: https://ajentic.com