Privacy Policy

1. Data Controller

The data controller is Pierre Lemperiere. You can reach us at hello@agentworkspace.dev.

2. Data We Collect

• Account data: email address, name, and profile information provided through our authentication provider (Clerk).
• Agent data: calendar events, documents, and configuration you or your AI agents create within the Service.
• Usage data: pages visited, features used, and performance metrics collected via Vercel Analytics (anonymized, no cookies).
• Technical data: IP address, browser type, and device information transmitted automatically with HTTP requests.

3. Lawful Basis for Processing

• Contract performance (Art. 6(1)(b) GDPR): to provide and operate the Service you signed up for.
• Legitimate interests (Art. 6(1)(f) GDPR): to maintain security, prevent abuse, and improve the Service.
• Consent (Art. 6(1)(a) GDPR): where required, for example for optional analytics or marketing communications.

4. How We Use Your Data

We use your data to:

• Provide, operate, and maintain the Service.
• Authenticate your identity and secure your account.
• Respond to support requests and communicate updates.
• Analyze usage to improve the Service (aggregated, anonymized).

We do not sell your personal data to third parties.

5. Third-Party Processors

We use the following third-party services that process data on our behalf:

• Clerk — authentication and user management.
• Neon — PostgreSQL database hosting (EU region).
• Vercel — application hosting and analytics.

Each processor is bound by a Data Processing Agreement (DPA) and processes data only as instructed by us.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

7. Your Rights (GDPR)

Under the GDPR, you have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Erase your data ("right to be forgotten").
• Restrict processing.
• Data portability — receive your data in a structured, machine-readable format.
• Object to processing based on legitimate interests.
• Withdraw consent at any time (without affecting the lawfulness of prior processing).

To exercise any of these rights, email hello@agentworkspace.dev. We will respond within 30 days.

8. Cookies

AgentWorkspace uses only essential cookies required for authentication and session management. We do not use advertising or tracking cookies. Vercel Analytics is cookie-free and collects only anonymized usage data.

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), encrypted database connections, and access controls. However, no method of transmission or storage is 100% secure.

10. International Transfers

Your data may be processed outside the European Economic Area (EEA) by our third-party processors. Where this occurs, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses or adequacy decisions).

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top indicates the most recent revision.

12. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the French data protection authority (CNIL) at www.cnil.fr, or with your local supervisory authority.

13. Contact

Questions about this policy? Email us at hello@agentworkspace.dev.