Privacy Policy

1. Who operates this site

Agenclaw (agenclaw.tech) is operated by Hakan Çelik, an individual operating as a sole proprietor / independent operator — not a registered company. Where this policy or the rest of the site says "we," "us," or "Agenclaw," it refers to that individual, trading under the Agenclaw name.

Correspondence address: Istanbul, Turkey. A full street address is provided on request to a party with a legitimate need (e.g. a data protection authority), consistent with common practice for individually-operated (non-incorporated) businesses.

2. Scope of this policy

This policy applies to visitors, prospective customers, and account holders of Agenclaw's website and dashboard, and is written to address the three markets Agenclaw serves:

• United States — including state-level privacy laws such as the CCPA/CPRA (California), where applicable to Agenclaw's scale and activity.
• United Kingdom — the UK GDPR and the Data Protection Act 2018.
• European Union — the EU General Data Protection Regulation (GDPR).

Where these frameworks differ, this policy takes the more protective standard as its default, rather than maintaining separate policies per region.

3. Information we collect

Account & identity data

Name, work email address, and any information you provide during onboarding (your ICP definition, topic maps, industry, and similar business context you supply to configure a run).

Billing data

Billing is handled directly by the operator, not by a card-based payment processor. We collect the billing contact name, email, and business details needed to issue an invoice, and the tier/engine you request. Payment is made by bank wire transfer directly to the operator's bank account — Agenclaw does not collect or store card numbers or other card payment details, because none are used anywhere in this flow.

Usage data

Jobs you run, units delivered or rejected, integration connections you configure, and general product usage (pages viewed in the dashboard, actions taken) for the purpose of operating and improving the service.

Integration credentials

If you connect a CMS or other third-party integration (WordPress, Webflow, Ghost, Shopify, Sanity, Contentful, or a custom webhook), we store the credentials needed to publish on your behalf. These are stored encrypted at rest.

Communications

Support requests, replies to outreach sent through the platform, and any other correspondence with us.

4. How we use it

• To operate the service — running jobs, delivering leads or pages, publishing to your connected CMS, and billing for units shipped.
• To verify contact deliverability and lead quality as part of the production line described on our How it works page.
• To communicate with you about your account, billing, and material changes to the service.
• To maintain security, prevent abuse, and enforce our Terms of Service.
• To meet legal and tax obligations, including our own recordkeeping obligations as the party issuing your invoices.

We do not sell personal information, and we do not use your data to train third-party models beyond what is strictly required to operate the agents that produce your leads or pages.

5. Legal basis for processing (UK/EU)

For users in the UK and EU, we rely on the following legal bases under GDPR / UK GDPR:

• Contract — processing necessary to provide the service you've signed up for.
• Legitimate interest — for security, fraud prevention, and service improvement, balanced against your rights.
• Consent — where required, such as certain cookie categories (see §10).
• Legal obligation — where we must retain or disclose data to comply with law, including invoicing and tax recordkeeping obligations.

6. Who we share it with

We share data only with service providers (processors) who help us run Agenclaw, under agreements that limit their use of it to the services they provide us:

• Cloud infrastructure & database providers — hosting, with row-level security enforced on every table holding customer data. This includes Vercel, which also provides our cookieless page-view analytics (no cookies set, no IP addresses retained).
• AI model providers — to run the agents that qualify leads, write pages, and check evidence; only the data needed for a given job is sent.
• Email and communication providers — to deliver reports and transactional email.

We do not share personal information with data brokers or advertisers, and we do not sell it.

7. International data transfers

Agenclaw's operator is based in Turkey. If you are located in the UK, EU, or elsewhere, your data may be processed in Turkey or in the jurisdictions of the service providers listed in §6. Where required, we rely on Standard Contractual Clauses or an equivalent safeguard for transfers out of the UK/EU.

8. Data retention

We retain account and job data for as long as your account is active, and for a limited period afterward to meet legal, tax, and dispute-resolution obligations. Rejected or spiked units are not retained as deliverable data beyond what's needed for quality auditing. You can request deletion of your account data at any time (see §9).

9. Your rights

If you are in the UK or EU

You have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. You also have the right to lodge a complaint with your local data protection authority (in the UK, the ICO; in the EU, your national supervisory authority).

If you are in the United States

Depending on your state of residence, you may have rights to know what personal information is collected, request deletion, and opt out of the sale or sharing of personal information — we do not sell personal information, so there is nothing to opt out of on that front. You may still exercise access and deletion rights by contacting us (see §14).

Exercising your rights

Contact us using the details in §14. We will respond within the timeframe required by applicable law (generally 30 days under GDPR/UK GDPR).

10. Cookies

We use a limited set of cookies: strictly necessary cookies (to keep you signed in and the dashboard functional). For marketing-site traffic patterns, we use Vercel Analytics, which is cookieless and does not retain IP addresses — it does not set any cookie and needs no consent banner. Strictly necessary cookies don't require consent under UK/EU law; any non-essential cookie we introduce in the future would only be set with your consent, which you could withdraw at any time.

11. Children

Agenclaw is a B2B product intended for business use and is not directed at children. We do not knowingly collect personal information from anyone under 16 (or the relevant minimum age in your jurisdiction).

12. Security

We apply row-level security at the database layer, so an account can only ever query its own data — enforced structurally, not just by application logic. Third-party integration credentials are stored encrypted at rest. No system is perfectly secure, and we can't guarantee absolute security, but these are real, structural controls, not a policy statement without a mechanism behind it.

13. Changes to this policy

If we make material changes to this policy, we'll update the effective date above and, where required by law, notify account holders directly before the change takes effect.

14. Contact

For any privacy request or question, contact privacy@agenclaw.tech.