Privacy Policy
How we collect, use and protect your personal data.
Last updated: March 2026
Table of Contents
1. Who we are and data controller details
AgentForge Srl (hereinafter "AgentForge", "we", "the Company") is the data controller for personal data collected through the AgentForge platform and related websites.
Company name: AgentForge Srl
Registered address: Via Torino 45, 37100 Verona VR, Italy
VAT number: [TODO: insert VAT number]
DPO email: privacy@agentforge.solutions
2. Personal data collected
We collect the following personal data in the course of providing our services:
- Identification data: first name, last name, email address, username.
- Business data: company name, VAT number, industry.
- Usage data: access logs, IP address, browser, pages visited, session duration, features used.
- Payment data: managed by Stripe Inc. We do not store credit card data.
- Communications: content of emails and messages sent to our support team.
- AI agent data: configurations, conversations and knowledge bases uploaded to the platform.
Data is collected directly from the user at the time of registration, during service use, and through tracking technologies such as cookies (see section 4).
3. How we use your data
Personal data collected is used for the following purposes, on the basis of their respective legal grounds:
- Service provision (contract performance): account creation and management, platform functionality provision, payment processing.
- Service improvement (legitimate interest): usage analysis, debugging, development of new features, performance optimisation.
- Service communications (contract performance): technical notifications, platform updates, account-related communications.
- Commercial communications (consent): newsletter, promotional offers, product news — only with explicit consent.
- Legal obligations (compliance with legal obligations): invoice retention, responding to authority requests.
5. Sharing with third parties
We do not sell your personal data to third parties. We share data only in the following circumstances:
- Stripe Inc. — payment processor. Payment data is managed directly by Stripe according to their Privacy Policy.
- Amazon Web Services (AWS) — cloud infrastructure. Data is hosted on AWS EU-West (Ireland) servers, within the European Economic Area.
- Cloudflare Inc. — CDN and security services. Data transits through the Cloudflare network to ensure performance and DDoS protection.
- Analytics providers — we use internal analytics tools to analyse platform usage.
- Competent authorities — in case of legal obligation or justified request from authorities.
All third-party providers are bound by data processing agreements (DPAs) compliant with GDPR.
6. User rights
In accordance with EU Regulation 2016/679 (GDPR), you have the following rights regarding your personal data:
- Right of access (Art. 15): you may request a copy of the personal data we process about you.
- Right to rectification (Art. 16): you may request the correction of inaccurate or incomplete data.
- Right to erasure (Art. 17): you may request the deletion of your personal data ("right to be forgotten").
- Right to portability (Art. 20): you may request your data in a structured, machine-readable format.
- Right to object (Art. 21): you may object to the processing of your data for direct marketing purposes.
- Right to restriction (Art. 18): you may request restriction of processing in certain cases.
To exercise your rights, send a written request to privacy@agentforge.solutions. We will respond within 30 days. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
7. DPO contacts
For any questions regarding the processing of your personal data or to exercise your rights, you can contact our Data Protection Officer:
Data Protection Officer
AgentForge Srl
Via Torino 45, 37100 Verona VR, Italy
privacy@agentforge.solutions