Privacy Policy

Last Updated: March 22, 2026

AgentStack is a cloud-based platform that lets you build, train, and deploy AI-powered support agents. This Privacy Policy explains what data we collect and how we use it.

Ray Amjad LTD (Company Number 14506459, incorporated in the United Kingdom) is the provider of AgentStack and acts as the data controller for the personal data we handle.

What We Collect

Account Information: Email address, name, and authentication credentials used to create and manage your account.

Billing Information: Processed by our payment provider (Stripe) for purchases, refunds, and fraud prevention. We receive only the order metadata necessary to fulfil your purchase and provide support.

Organisation Data: Organisation name, team member details, and roles when you use our team features.

Agent Data: When you create AI agents, we store:

  • Training data you provide (website URLs, uploaded documents, Q&A pairs)
  • Agent configurations and customisations
  • Conversation logs between your agents and your end users
  • Analytics and performance metrics

Usage Data: We automatically collect information about how you use the platform, including pages visited, features used, and interaction patterns.

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process transactions and manage your account
  • Train and operate your AI agents as configured by you
  • Analyse usage to improve the platform
  • Send administrative information and support communications
  • Comply with legal obligations

Third-Party Services

AgentStack integrates with the following third-party services. Your use of these services may be subject to their own terms and policies.

AI Model Providers

Your agents' responses are powered by the AI model provider you configure. When your agent processes a conversation, the relevant context and user message are sent to that provider. We do not control how these providers handle data beyond our API agreements with them.

Payments

All payments are handled by Stripe. Please review the Stripe Privacy Policy for details on how they handle payment data.

Storage

Cloudflare R2 is used for file storage (uploaded documents, agent avatars). See the Cloudflare Privacy Policy.

Analytics

We use PostHog for product analytics to understand how our platform is used and to improve the experience. PostHog may set its own cookies. We do not use this data for advertising purposes.

Background Processing

Trigger.dev is used for background job processing (e.g., website crawling, document processing).

Cookies

We use strictly necessary cookies for authentication and session management. We also use analytics cookies (PostHog) to understand how our website and platform are used. You can manage your cookie preferences via the "Cookie Preferences" link in our footer.

For full details, see our Cookie Policy.

Data Security

We implement appropriate security measures including:

  • Encryption in transit (TLS) and at rest
  • Access controls and authentication
  • Regular security reviews
  • Secure cloud infrastructure

Data Retention

  • Account data: Retained as long as your account is active. You can request deletion at any time.
  • Agent data and conversation logs: Retained as long as the associated agent exists. You can delete agents and their data at any time through the dashboard.
  • Training data: Stored as long as the associated agent exists.
  • Billing data: Retained as required for accounting and legal purposes.

Your Rights

You may have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your data
  • Export your data
  • Object to or restrict certain processing

Much of your data (agents, training data, conversations) is directly accessible through the dashboard, and we encourage you to manage and delete data there where possible. For any other requests, contact us at legal@agentstack.build.

International Data Transfers

Your data may be processed in the United States and other countries where our service providers operate. Our providers maintain appropriate security measures for international data transfers.

Children's Privacy

AgentStack is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us to delete it.

Changes to This Policy

We may update this policy. If we make material changes, we will update the date above and, where appropriate, notify you via email or through the Service.

Contact

Data Controller: Ray Amjad LTD (Company Number 14506459, United Kingdom)