Privacy Policy
Last updated 10 June 2026
This Privacy Policy explains how Scaleport AI Oy (Finnish business ID / Y-tunnus 3408578-6), based in Oulu, Finland (“Scaleport AI Oy”, “we”, “us”), collects, uses and protects personal data in connection with AgntApp — our platform for building AI agents and connecting them to messaging channels such as WhatsApp, Messenger and Instagram.
AgntApp is operated by Scaleport AI Oy. This policy covers our marketing site at agntapp.com, the product at app.agntapp.com, and the agents and integrations you build with it.
1. Our role: controller and processor
Depending on the data, we act in one of two roles under the EU General Data Protection Regulation (GDPR):
- As a controller — for personal data of our account holders, prospective customers and website/waitlist visitors, we decide why and how the data is processed.
- As a processor — when you (an AgntApp customer) configure an agent that handles conversations with your own end-users, you are the controller of those end-user messages and we process them on your behalf and under your instructions. You are responsible for having a lawful basis and your own privacy notice for your end-users. Sections 8–9 still describe the rights available to those end-users.
2. Personal data we collect
Information you give us
- Account & profile data — name, email address, password (stored only as a salted hash) or Google sign-in identifier, and organisation details.
- Waitlist / early-access data — the email address and any details you submit on agntapp.com.
- Agent content — the instructions, prompts, settings, files and knowledge-base material you upload to ground your agents.
- Support communications — messages you send us by email.
Information from your end-users (processed on your behalf)
- Conversation data — the content of messages exchanged between your end-users and your agents over WhatsApp, Messenger, Instagram or the web chat.
- Messaging identifiers — profile names, phone numbers, and platform-scoped user IDs that Meta provides so the agent can receive and reply to a conversation.
Information we collect automatically
- Usage & device data — log data, IP address, browser/device type, pages viewed and timestamps.
- Cookies — strictly necessary cookies for authentication and security, and limited analytics. See Section 11.
3. How we use personal data and our legal bases
| Purpose | Legal basis |
|---|---|
| Provide, operate and maintain AgntApp, including running your agents and delivering messages. | Performance of a contract |
| Manage the waitlist and respond to early-access enquiries. | Consent / pre-contractual steps at your request |
| Secure the service, prevent abuse, debug and improve reliability. | Legitimate interests |
| Send service and product updates by email. | Legitimate interests / consent where required |
| Comply with legal, tax and accounting obligations. | Legal obligation |
4. AI processing
AgntApp uses third-party AI model providers to generate your agents’ responses. To do this, we send the content of a conversation and relevant knowledge-base material to those providers solely to produce a reply or to create search embeddings. We use these providers under terms that do not permit them to use your content to train their own models. The providers are listed in Section 6.
AI output can be inaccurate or incomplete. You are responsible for reviewing agent behaviour before relying on it, especially in regulated or high-stakes contexts.
5. WhatsApp, Messenger and Instagram
When you connect an agent to a Meta messaging channel, messages are delivered through Meta Platforms Ireland Limited (“Meta”). Meta processes the conversation and the associated identifiers in order to deliver messages, acting as a sub-processor to us and, for its own platform purposes, as an independent controller under its own WhatsApp Business Messaging Policy and Meta Privacy Policy. We use Meta platform data only to operate your messaging integration and in accordance with Meta’s Platform Terms and Developer Policies. We do not sell this data or use it for advertising.
6. Sharing and sub-processors
We do not sell personal data. We share it only with service providers (“sub-processors”) that help us run AgntApp, under contracts that require them to protect it and use it only on our instructions. Our current sub-processors are:
| Provider | Purpose | Location |
|---|---|---|
| Meta Platforms Ireland Ltd. | WhatsApp, Messenger & Instagram message delivery | Ireland (EU) |
| Vercel Inc. | Application hosting, file storage (Blob), database (Postgres / Neon), key-value cache (Upstash) and product analytics | USA / EU |
| Qdrant | Vector search storage for knowledge bases | EU |
| Anthropic, OpenAI, Google, xAI and Groq | AI model inference and embeddings (one or more, depending on the agent’s configuration) | USA / EU |
| LlamaIndex (LlamaCloud / LlamaParse) | Parsing uploaded documents for knowledge bases | USA |
| Vapi | Voice agent calls (only if you enable voice features) | USA |
| Google (OAuth) | “Sign in with Google” authentication | USA / EU |
We may also disclose data where required by law, or to protect our rights, users or the public.
7. International data transfers
Some sub-processors are located outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, or an adequacy decision where one applies.
8. Data retention
We keep personal data only as long as needed for the purposes above. Account and agent data are kept for the life of your account and deleted within 30 days of account closure or a valid deletion request (see our Data Deletion page), except where we must retain certain records to meet legal obligations. Backups are rotated and overwritten on a regular cycle. Waitlist data is kept until the early-access programme ends or you ask us to remove it.
9. Your rights
Subject to applicable law, you have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time. To exercise any of these rights, email us at support@agntapp.com. If your data is processed by an AgntApp customer’s agent, please also contact that business as the controller.
You also have the right to lodge a complaint with a supervisory authority. In Finland this is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).
10. Security
We use encryption in transit, access controls, hashed credentials and reputable infrastructure providers to protect personal data. No system is perfectly secure, but we work to protect your information and to notify you and the relevant authority of a qualifying data breach as required by law.
11. Cookies
We use strictly necessary cookies to keep you signed in and to secure the service, and limited analytics to understand usage. You can control cookies through your browser settings; disabling necessary cookies may break sign-in.
12. Children
AgntApp is not directed to children and is not intended for use by anyone under 16. We do not knowingly collect personal data from children.
13. Changes to this policy
We may update this policy from time to time. We will post the updated version here and revise the “Last updated” date above, and where appropriate notify you of material changes.
14. Contact us
Scaleport AI Oy (Y-tunnus 3408578-6)
Oulu, Finland
support@agntapp.com