Privacy Policy | How Agents Chef Protects Your Data

Agents Chef ("we," "us," or "our") operates the website www.agentschef.com and provides custom AI agent development, workflow automation, and related technology services (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, use our Services, or otherwise interact with us.

By accessing our website or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our website or Services.

1. Information We Collect

We collect information in the following ways:

1.1 Information You Provide Directly

When you interact with us, you may voluntarily provide personal information, including:

Contact Information: Your name, email address, phone number, and company name when you fill out our contact form, book an AI audit, or request a consultation.
Account Information: If you create an account to access our platform or dashboard, we collect your login credentials (email and password) and profile details.
Business Information: Details about your business operations, workflows, and technical infrastructure that you share during discovery calls, AI audits, or project engagements.
Payment Information: Billing details such as your billing address and payment method. We do not store credit card numbers directly; payment processing is handled by third-party payment processors (see Section 4).
Communications: Any information you include in emails, support requests, or other messages you send to us.

1.2 Information Collected Automatically

When you visit our website, certain information is collected automatically through cookies and similar technologies:

Device and Browser Information: Your IP address, browser type and version, operating system, device type, and screen resolution.
Usage Data: Pages visited, time spent on each page, click patterns, referring URL, and navigation paths through our website.
Cookies and Tracking Technologies: We use cookies, pixels, and similar technologies to analyze website traffic, remember your preferences, and improve your experience. See Section 7 for our Cookie Policy.

1.3 Information from Third Parties

We may receive information about you from third-party sources, including analytics providers (such as Google Analytics), advertising platforms, business directories, and publicly available sources. This information may include your name, email address, company details, and professional profile information.

2. How We Use Your Information

We use the information we collect for the following purposes:

To Provide and Deliver Services: Processing your requests, delivering AI agent development and automation services, managing your account, and communicating with you about your projects.
To Improve Our Website and Services: Analyzing how users interact with our website to improve functionality, content, and user experience.
To Communicate with You: Sending you service-related communications, responding to your inquiries, providing project updates, and sending marketing communications (with your consent where required by law).
To Process Payments: Facilitating billing and payment for our Services through our third-party payment processors.
To Ensure Security: Detecting, preventing, and addressing fraud, unauthorized access, and other security issues.
To Comply with Legal Obligations: Meeting our legal and regulatory requirements, responding to legal requests, and enforcing our terms.
To Conduct Business Analysis: Understanding market trends, improving our service offerings, and planning business development activities.

3. AI-Specific Data Practices

Given the nature of our Services, we want to be especially transparent about how data is handled in the context of AI agent development and deployment.

3.1 Your Data Never Trains Our Models

Client data provided during AI agent development and deployment is used exclusively for building and operating your custom AI agents. Your business data, customer data, and operational data are never used to train, fine-tune, or improve our internal AI models, the AI models of our technology partners, or any third-party models.

3.2 Zero Data Retention on AI Models

When our AI agents process data on your behalf, no client data is retained by the underlying AI model providers after the processing request is complete. We configure zero data retention policies with all AI model providers we use, including but not limited to Anthropic (Claude), OpenAI, Google (Gemini), and open-source model providers deployed via Ollama.

3.3 On-Premise Deployment Option

For clients with strict data sovereignty requirements, we offer on-premise AI agent deployment. In this model, your data never leaves your own servers or private cloud infrastructure. We provide full documentation and configuration to ensure your data remains entirely within your controlled environment.

3.4 Knowledge Base Data

If we build a knowledge base or Retrieval Augmented Generation (RAG) system as part of your AI agent, the data used to populate that knowledge base is stored securely in a dedicated environment (cloud-hosted or on-premise depending on your deployment model). This data is accessible only to your AI agent and authorized personnel. It is never shared with other clients or used for any purpose beyond operating your specific agent.

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our website and delivering our Services. These include:

Hosting Providers: Vercel (website hosting), cloud infrastructure providers for AI agent deployment.
Payment Processors: For secure payment processing. These providers have their own privacy policies governing their use of your information.
Analytics Providers: Google Analytics and similar services for understanding website usage patterns.
Communication Tools: Email service providers for sending service-related communications and marketing emails (with your consent).

All service providers are contractually obligated to use your information only for the purposes we specify and to protect your data with appropriate security measures.

4.2 Legal Requirements

We may disclose your information if required to do so by law, or if we believe in good faith that such disclosure is necessary to comply with a legal obligation, protect and defend our rights or property, prevent fraud or address security issues, or protect the personal safety of our users or the public.

4.3 Business Transfers

If Agents Chef is involved in a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

4.4 With Your Consent

We may share your information for purposes not described in this Privacy Policy with your explicit consent.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:

Account Information: Retained for the duration of your account or business relationship with us, plus a reasonable period thereafter for record-keeping and legal compliance.
Project Data: Client project files, AI agent configurations, and related deliverables are retained for the duration of the project engagement and any active support retainer. Upon project completion and expiration of any support period, project data is deleted within 90 days unless you request otherwise.
Communication Records: Emails and support correspondence are retained for up to 3 years for quality assurance and dispute resolution purposes.
Website Analytics Data: Aggregated and anonymized analytics data may be retained indefinitely. Identifiable analytics data is retained for up to 26 months in accordance with Google Analytics data retention settings.
Financial Records: Payment and billing records are retained for 7 years as required by applicable tax and financial regulations.

You may request deletion of your personal information at any time by contacting us (see Section 10). We will comply with your request unless we are legally required to retain certain information.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security practices include:

Encryption: All data transmitted between your browser and our website is encrypted using TLS/SSL (HTTPS). Sensitive data at rest is encrypted using industry-standard encryption algorithms.
Access Controls: Access to personal information is restricted to authorized personnel who require it for legitimate business purposes. We use role-based access control (RBAC) and multi-factor authentication for all internal systems.
Infrastructure Security: Our hosting infrastructure is provided by Vercel and major cloud providers that maintain SOC 2, ISO 27001, and other relevant security certifications.
Regular Security Reviews: We conduct periodic security assessments to identify and address potential vulnerabilities.
Incident Response: We maintain an incident response plan to promptly address any data breach. In the event of a breach that affects your personal information, we will notify you and relevant authorities as required by applicable law.

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we are committed to maintaining the highest practical standards.

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to improve your browsing experience and analyze website traffic.

7.1 Types of Cookies We Use

Cookie Type	Purpose	Duration	Required?
Essential	Required for the website to function properly (session management, security, load balancing).	Session	Yes
Analytics	Help us understand how visitors interact with our website (pages viewed, traffic sources, navigation patterns).	Up to 26 months	No
Functional	Remember your preferences and settings (language, region, display preferences).	Up to 12 months	No
Marketing	Track visitors across websites to display relevant advertisements (if applicable).	Up to 12 months	No

7.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. However, if you block essential cookies, certain features of our website may not function properly.

You can also opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

8.1 General Rights

Right of Access: You have the right to request a copy of the personal information we hold about you.
Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal information.
Right to Deletion: You have the right to request deletion of your personal information, subject to certain legal exceptions.
Right to Restrict Processing: You have the right to request that we limit how we use your personal information.
Right to Data Portability: You have the right to request your personal information in a structured, commonly used, machine-readable format.
Right to Object: You have the right to object to our processing of your personal information for certain purposes, including direct marketing.
Right to Withdraw Consent: Where we rely on your consent to process personal information, you may withdraw that consent at any time.

8.2 For European Economic Area (EEA) Residents (GDPR)

If you are located in the EEA, the legal bases for our processing of your personal information include: performance of a contract (delivering Services you have requested), legitimate interests (improving our Services, ensuring security, and conducting business analysis), consent (for marketing communications and non-essential cookies), and legal obligations (tax, accounting, and regulatory compliance).

You have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.

8.3 For California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the purposes for collection, and the categories of third parties with whom we share it.
Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
Right to Opt-Out of Sale: We do not sell your personal information. If this changes, we will update this policy and provide you with a mechanism to opt out.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

8.4 For Indian Residents (DPDP Act)

If you are a resident of India, the Digital Personal Data Protection Act, 2023 (DPDP Act) provides you with specific rights over your personal data. You have the right to access your personal data, request correction and erasure, data portability, and the right to nominate a representative. We process your data based on consent or legitimate uses as defined under the DPDP Act. You can withdraw your consent at any time by contacting us.

8.5 Exercising Your Rights

To exercise any of the above rights, please contact us at privacy@agentschef.com or use the contact details in Section 13. We will respond to your request within 30 days (or sooner if required by applicable law). We may need to verify your identity before processing your request.

9. International Data Transfers

Agents Chef is based in India. If you access our website or use our Services from outside India, your personal information may be transferred to, stored, and processed in India or other countries where our service providers operate.

When transferring personal information internationally, we implement appropriate safeguards to ensure your data is protected in accordance with applicable data protection laws. These safeguards may include Standard Contractual Clauses (SCCs) approved by the European Commission, data processing agreements with our service providers that include appropriate security and privacy commitments, and compliance with applicable data transfer frameworks.

10. Third-Party Links

Our website may contain links to third-party websites, services, or applications that are not operated by us (such as LinkedIn, Twitter/X, and GitHub). We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party websites you visit.

11. Children's Privacy

Our website and Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email or through a prominent notice on our website.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Agents Chef

Founded by: Siddhant Singh Rao
Email for Privacy Requests: contact@agentschef.com
General Inquiries: contact@agentschef.com
Website: https://www.agentschef.com

For data protection requests, please include "Privacy Request" in the subject line of your email. We aim to respond to all privacy-related inquiries within 30 days.