Privacy Policy
MicroAGI GmbH ("the Company," "we," "us," or "our") operates the MicroAGI platform, an AI agent automation service used by enterprise operations teams across Europe. This Privacy Policy explains what personal data we collect, how we use it, and the rights you hold as a data subject under the General Data Protection Regulation (GDPR). We take data protection seriously: our customers rely on us to process sensitive operational data, and we apply the same rigor to our own data practices.
1. Data Controller
MicroAGI GmbH (Torstrasse 177, 10115 Berlin, Germany) is the data controller for personal data processed through mircoagi.com. You can contact us at [email protected] for any data-protection matter, including to exercise the rights described below.
2. Personal Data We Process
MicroAGI collects personal data through two channels: data submitted by visitors and prospective customers to this website, and data processed on behalf of enterprise customers as part of the platform service.
Website and inquiry data (data controller capacity):
- Identity and contact data you submit: name, business email address, phone number, company name, and job title;
- Communication content: messages sent via our contact form or email;
- Technical data collected automatically: IP address, browser type and version, operating system, pages visited, and session timestamps;
- Analytics data, where you have given prior consent via our cookie banner.
Platform operational data (data processor capacity): When enterprise customers use the MicroAGI platform to build and run back-office agents, they may configure agents to access data from connected business systems. In that context, the Company acts as a data processor on the customer's instruction, not as a data controller. Customers retain controller responsibility for the personal data their agents process. Data Processing Agreements (DPAs) are available for Enterprise plan customers.
3. Purposes and Legal Bases (Article 6 GDPR)
| Purpose | Legal basis |
|---|---|
| Responding to sales and support inquiries from prospective and current customers | Pre-contract steps / legitimate interest (Art. 6(1)(b)/(f)) |
| Operating and securing the mircoagi.com website and the MicroAGI platform | Legitimate interest (Art. 6(1)(f)) |
| Legal and regulatory compliance | Legal obligation (Art. 6(1)(c)) |
| Product updates and relevant communications (where you have not opted out) | Legitimate interest (Art. 6(1)(f)) |
| Analytics cookies measuring site usage | Consent (ePrivacy Directive + Art. 6(1)(a)) |
4. Recipients and Transfers
Personal data is shared only with processors acting on our behalf under Article 28 GDPR data-processing agreements. These include infrastructure hosting (EU-located), transactional email delivery, and anonymised analytics. We do not sell personal data to third parties.
All processing of customer data takes place on infrastructure located within Germany and the European Union. Where any data is transferred outside the EU/EEA, we rely on Standard Contractual Clauses (Art. 46 GDPR) and carry out a Transfer Impact Assessment as required following the Schrems II ruling.
5. Retention
We retain website inquiry and contact data for 24 months from last contact, after which it is deleted unless a contract relationship has been established. Server access logs are retained for 90 days. Platform operational data processed on behalf of enterprise customers is retained according to the customer's configuration and the applicable DPA, with configurable purge schedules available on Team and Enterprise plans.
6. Your GDPR Rights
As a data subject under the GDPR, you have the following rights in relation to personal data we hold about you:
- Right of access (Art. 15): confirm whether we process your personal data and obtain a copy;
- Right to rectification (Art. 16): request correction of inaccurate or incomplete data;
- Right to erasure / "right to be forgotten" (Art. 17), subject to limited exceptions where retention is required by law;
- Right to restriction of processing (Art. 18): request that we limit processing in certain circumstances;
- Right to data portability (Art. 20): receive your personal data in a structured, machine-readable format;
- Right to object (Art. 21): object to processing based on legitimate interest, including objection to direct marketing, without needing to provide a reason;
- Right not to be subject to solely automated decision-making with legal or similarly significant effects (Art. 22). The Company does not engage in automated decision-making of this type.
To exercise any of these rights, contact us at [email protected]. We will respond within one calendar month, extendable by two further months for complex or multiple requests.
7. Right to Lodge a Complaint
If you believe your data-protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. As a company registered in Germany, our lead supervisory authority is the Berliner Beauftragte fur Datenschutz und Informationsfreiheit. You may also address a complaint to the supervisory authority in your country of residence. A list of EU/EEA data protection authorities is available at edpb.europa.eu.
8. Cookies
Our use of cookies is governed by the ePrivacy Directive and the GDPR. Non-essential cookies, such as those used for anonymised usage analytics, are not placed on your device until you give prior consent through our cookie banner. See our Cookie Policy for a full category breakdown and instructions for managing your preferences.
9. Security
The Company implements technical and organisational security measures appropriate to the risk, including TLS 1.3 in transit, AES-256 encrypted storage, role-based access controls with session management, and regular security review. All agent actions on the MicroAGI platform are logged in an audit trail, which is the same inspection-layer principle we apply to the protection of customer data.
10. Model Training
The Company does not use enterprise customer workflow data or operational content submitted to the MicroAGI platform to train machine-learning models without explicit written consent from the relevant customer. Data submitted via the website (contact forms, email) is used solely for the purposes stated in this policy.
11. Changes to This Policy
Material changes to this Privacy Policy will be reflected by an updated "Last updated" date at the top of this page. Where required under GDPR, we will request renewed consent. We encourage you to review this policy periodically.
12. Contact
MicroAGI GmbHTorstrasse 177
10115 Berlin, Germany
Email: [email protected]
Phone: +49 30 5557 1420