Privacy Policy

Privacy Policy

How we collect, use and protect your personal data.

Last updated: March 2026

1. Who we are and data controller details

AgentForge Srl (hereinafter "AgentForge", "we", "the Company") is the data controller for personal data collected through the AgentForge platform and related websites.

Company name: AgentForge Srl

Registered address: Via Torino 45, 37100 Verona VR, Italy

VAT number: [TODO: insert VAT number]

DPO email: privacy@agentforge.solutions

2. Personal data collected

We collect the following personal data in the course of providing our services:

  • Identification data: first name, last name, email address, username.
  • Business data: company name, VAT number, industry.
  • Usage data: access logs, IP address, browser, pages visited, session duration, features used.
  • Payment data: managed by Stripe Inc. We do not store credit card data.
  • Communications: content of emails and messages sent to our support team.
  • AI agent data: configurations, conversations and knowledge bases uploaded to the platform.

Data is collected directly from the user at the time of registration, during service use, and through tracking technologies such as cookies (see section 4).

3. How we use your data

Personal data collected is used for the following purposes, on the basis of their respective legal grounds:

  • Service provision (contract performance): account creation and management, platform functionality provision, payment processing.
  • Service improvement (legitimate interest): usage analysis, debugging, development of new features, performance optimisation.
  • Service communications (contract performance): technical notifications, platform updates, account-related communications.
  • Commercial communications (consent): newsletter, promotional offers, product news — only with explicit consent.
  • Legal obligations (compliance with legal obligations): invoice retention, responding to authority requests.

5. Sharing with third parties

We do not sell your personal data to third parties. We share data only in the following circumstances:

  • Stripe Inc.payment processor. Payment data is managed directly by Stripe according to their Privacy Policy.
  • Amazon Web Services (AWS)cloud infrastructure. Data is hosted on AWS EU-West (Ireland) servers, within the European Economic Area.
  • Cloudflare Inc.CDN and security services. Data transits through the Cloudflare network to ensure performance and DDoS protection.
  • Analytics providerswe use internal analytics tools to analyse platform usage.
  • Competent authoritiesin case of legal obligation or justified request from authorities.

All third-party providers are bound by data processing agreements (DPAs) compliant with GDPR.

6. User rights

In accordance with EU Regulation 2016/679 (GDPR), you have the following rights regarding your personal data:

  • Right of access (Art. 15): you may request a copy of the personal data we process about you.
  • Right to rectification (Art. 16): you may request the correction of inaccurate or incomplete data.
  • Right to erasure (Art. 17): you may request the deletion of your personal data ("right to be forgotten").
  • Right to portability (Art. 20): you may request your data in a structured, machine-readable format.
  • Right to object (Art. 21): you may object to the processing of your data for direct marketing purposes.
  • Right to restriction (Art. 18): you may request restriction of processing in certain cases.

To exercise your rights, send a written request to privacy@agentforge.solutions. We will respond within 30 days. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

7. DPO contacts

For any questions regarding the processing of your personal data or to exercise your rights, you can contact our Data Protection Officer:

Data Protection Officer

AgentForge Srl

Via Torino 45, 37100 Verona VR, Italy

privacy@agentforge.solutions