Privacy notice
This notice explains what personal data Agent L Advisory handles, why, who helps us handle it, and what you can do about it. It is written to meet the EU and UK General Data Protection Regulation and India's Digital Personal Data Protection Act, 2023.
Who we are
Agent L Advisory, Radhical Global Attorneys, Uppal Main Road, Road no 1, Hyderabad, Telangana, India, 500098 is responsible for your personal data. Our human advisors handle privacy questions and grievances: write to hello@agentl.in.
What we collect
- When you ask us a question (by our form or by email): your name, email address, company, website, country and what you write to us.
- When you become a client: our correspondence, the information you give us about your business so we can assess it, the reports we write for you, and invoice and payment status. Payments go through PayPal; we never see your card details.
- When we contact a company first: the company's name and website, public news about it, and a business email address that the company publishes on its own website. We never guess addresses, buy contact lists, or collect from LinkedIn or Upwork, and we respect each website's robots.txt.
- When you visit this website: nothing that identifies you. We use no cookies, no analytics and no tracking, and the site loads nothing from other companies. Cloudflare, which delivers the site, processes your IP address to deliver pages and protect against attacks.
Why we use it, and on what basis
- To answer your question and prepare a proposal. GDPR: steps you ask us to take before a contract, and our legitimate interest in replying. DPDP Act: the purpose for which you gave us the information.
- To do the work you hire us for, and to invoice it. GDPR: performance of our contract. DPDP Act: the purpose for which you gave it.
- To keep business, tax and accounting records. Our legal obligations.
- To send a first email to a company we think we can help. GDPR: our legitimate interest in telling businesses about relevant services, balanced by sending only to published business addresses, keeping it to one useful message, and stopping immediately if asked. We send these first emails only to companies in the United States, IN, Singapore. You can object at any time, and we will stop.
How we use AI
We use AI assistants to research, draft and check our work. Anthropic's Claude models process enquiries, client information and drafts on our behalf; Anthropic's commercial terms do not allow it to train its models on that data. For work that involves only public information, such as drafting articles or reading a company's public website, we may also use models run by Groq, with data retention switched off. Your messages and client information are never sent to Groq. Every assessment, report, proposal, quote and invoice is reviewed and approved by one of our human advisors before it reaches you. Routine emails may be sent by our assistants, and say so. No decision with legal or similarly significant effects on you is made by automated means alone.
Who else handles your data
These providers process personal data for us. Where a provider offers data processing terms, we have accepted them.
| Provider | What for |
|---|---|
| Cloudflare | Delivering this website, receiving email and enquiries |
| Supabase | Our database: enquiries, client records, drafts and their review history |
| Resend | Sending our emails |
| Anthropic | AI models that read and draft our work |
| Groq | AI models, for public information only |
| GitHub | Running our software on a schedule |
| Telegram | Internal messages that ask our human advisors to approve drafts, which may include a short summary of your message |
| PayPal | Invoices and payments |
| Brave Search | Web searches for companies; no personal data is sent |
We do not sell personal data or share it with anyone for their own marketing.
International transfers
We are based in India and several of these providers are in the United States. When personal data from the EU or UK goes to them, we rely on an adequacy decision (such as the EU-US Data Privacy Framework, where the provider is certified) or the European Commission's standard contractual clauses and the UK addendum to them.
How long we keep it
- Enquiries that do not lead to work, and records of companies we have contacted: no longer than 24 months after our last contact. We review these records at least once a year.
- Client files and invoices: for as long as Indian tax and accounting law requires, then deleted.
- If you ask us not to contact you again, we keep your email address on a do-not-contact list for as long as we send email, so that we never contact you by mistake.
Your rights
You can ask us to give you a copy of your personal data, correct it, delete it, or stop or limit how we use it, and you can object to our use of it at any time. Where we rely on your consent you can withdraw it, which does not affect what we did before. Under India's DPDP Act you can also nominate someone to exercise your rights if you die or become incapable. Write to hello@agentl.in; we reply within one month.
To stop our emails, reply with the word unsubscribe, or write to us. It takes effect at once.
If you are unhappy with our answer, you can complain to your data protection authority: in the EU, the authority in your country; in the UK, the Information Commissioner's Office; in India, the Data Protection Board of India, after first raising it with us.
Changes
If we change how we handle personal data, we will update this notice and the date at the top.