Privacy Policy

Coagento is operated by Digital Spark Team LLC, a limited liability company in the United States ("Coagento", "we", "us"). This policy explains what personal data we collect when you use our website, the Coagento dashboard and the AI agents you create with it (together, the "Service"), how we use and share it, and the choices and rights you have.

If you have questions, email us at support@coagento.com.

1. Our role

• For your account, billing and our website, we decide how personal data is used. We're the controller of that data.
• For the content your agents handle for you, such as messages from your customers, files you add and data from accounts you connect, you decide what is processed and why. We process it on your behalf and only to provide the Service, as your processor (or "service provider"). You're responsible for having a lawful basis for that data and for telling the people you talk to through Coagento how you use their data.

If you've messaged a business that uses Coagento and want to exercise your rights, please contact that business. We'll help them respond.

2. What we collect

Information you give us

• Account details: your name, email address, phone number if you add one, your time zone and language. We don't use passwords: you sign in with a one-time code we email you, or with Google or Facebook, which share your name, email address and profile picture with us.
• Business information: your answers in the onboarding interview, links to your website and social profiles, and your agents' names, jobs, schedules, skills and settings.
• Knowledge base: files, notes, price lists and YouTube links you add to an agent.
• Credentials: the API keys of the AI providers you use, the access tokens of your WhatsApp Business number and Slack apps, and the tokens of the accounts you connect.
• Waitlist: if you join our waitlist, your WhatsApp number or email address, and the language of the page you joined from. We use it only to contact you about getting access to Coagento.

Information created when you use the Service

• Conversations: messages between you, your agents and the people who message them, including text, voice notes and their transcripts, pictures and files, together with those people's names, phone numbers or Slack identifiers.
• Work: tasks, drafts waiting for approval, actions agents took and their results.
• Connected accounts: when you connect Google Calendar, Google Sheets, Instagram, Facebook Pages, Threads, X, Reddit or Notion, we access the data your agents need for what you ask them to do, such as calendar events, spreadsheets, posts, comments and pages.
• Usage: counts of messages and replies, the AI models used, tokens, estimated AI costs and response times.
• Technical data: your browser and device type, IP address, the time of requests and error logs. Our server logs record identifiers like account and message IDs, not the content of your messages.

Information from others

• Payments: Paddle, our reseller, handles payments. We receive your plan, subscription status, country and invoices, but never your full card details.
• Cookies and similar technologies: see Cookies.

3. How we use it

• To provide the Service: run your agents, answer messages, carry out tasks and the actions you approve, follow your agents' schedules, transcribe and create voice notes and pictures, and read your knowledge base.
• To sign you in and keep the Service secure: verify your identity, keep you signed in, and prevent fraud, spam and abuse.
• To bill you and apply your plan's limits.
• To talk to you: answer support requests and send service emails, like sign-in codes and important changes.
• To improve and promote the Service: understand how our website and dashboard are used and measure our ads, using analytics and advertising cookies where you allow them.
• To meet legal obligations and enforce our Terms of Service.

We don't sell your personal data, and we don't use your content to train AI models.

If you're in the EU, the UK or another place that requires a legal basis, we rely on: performing our contract with you (providing the Service); our legitimate interests (security, fraud prevention, improving the Service and marketing to business users); your consent (analytics and advertising cookies, which you can withdraw at any time); and legal obligations (such as tax records).

4. AI processing

• Your agents' replies are written by the AI provider whose key you add: OpenAI, Anthropic, Google Gemini or DeepSeek. The content needed for each reply is sent to that provider under your key and your agreement with them. Voice notes, voice replies and pictures use your OpenAI key, and YouTube transcripts use your Google Gemini key.
• Our own AI accounts: we use our DeepSeek account to decide which of your models answers a message, to keep track of tasks and approvals in your conversations, to describe the files you upload, to take notes from YouTube transcripts and to run the onboarding interview. This sends conversation content, document text and business information to DeepSeek, in China. We use our OpenAI account, in the United States, to read your business website during onboarding and look up your competitors.
• AI output can be wrong. Anything an agent would publish or send in your name waits as a draft until you approve it.

5. Google user data

Coagento's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use Google Calendar, Google Sheets and Google Drive data only to provide the features you ask your agents to perform. We don't use it for advertising, we don't sell it, and people at Coagento don't read it unless you ask us to, it's needed for security or the law requires it.

We use YouTube API Services to look up the details of YouTube videos you add. By adding a YouTube link, you agree to the YouTube Terms of Service, and Google's use of data is covered by the Google Privacy Policy.

6. Who we share it with

We share personal data only as described here.

Service providers that process data for us:

Services you choose: the AI providers whose keys you add, and the platforms you connect (WhatsApp, Instagram, Facebook and Threads by Meta, Slack, Google, X, Reddit and Notion), receive what your agents send or request on your behalf. Their own terms and privacy policies apply.

Others: we may disclose data when the law requires it, to protect the rights and safety of our users or the public, or as part of a merger, acquisition or sale of our business, in which case this policy continues to apply to your data.

7. International transfers

We're based in the United States and store data there. Our providers process data in other countries too, including China (DeepSeek). When we transfer personal data from the EU, the UK, Turkey or other places that restrict transfers, we use safeguards the law requires, such as standard contractual clauses, or rely on the transfer being necessary to provide the Service you asked for.

8. Cookies

• Essential cookies keep you signed in to the dashboard, protect you while you connect accounts and remember your language. The Service doesn't work without them.
• Analytics: Google Analytics and Plausible help us understand how our website and dashboard are used. Plausible doesn't use cookies.
• Advertising: the Meta Pixel measures the results of our ads on Meta.

Where the law requires it, we ask for your consent before using analytics or advertising cookies, and you can change your choice at any time. You can also block cookies in your browser.

9. How long we keep it

• Account data: while your account is open.
• Conversations: until you delete your account, or for the period you choose under Settings > Chat history (30, 90, 180 or 365 days, or forever). When a conversation passes that period, its text, voice notes and pictures are erased. We keep only counts, without content, for billing and usage.
• Knowledge base files: until you delete them or your account.
• Waitlist details: until you get access to Coagento, or until you ask us to remove them.
• After you delete your account: your data is removed from our live systems right away, and from backups within 30 days.
• Server logs: up to 30 days.
• Billing records: as long as tax and accounting laws require. Paddle keeps its own records.

10. Security

• Data is encrypted in transit (HTTPS).
• AI keys, WhatsApp and Slack tokens and the tokens of connected accounts are encrypted with AES-256-GCM before they're stored.
• Our database and stored files are encrypted at rest by our hosting providers.
• Access to systems is limited to the people who need it. Our team doesn't access the content of your conversations, files or connected accounts unless you give us access for a support request, it's needed to investigate abuse or a security incident, or the law requires it.

No system is perfectly secure. If a breach affects your personal data, we'll tell you and the authorities as the law requires.

11. Your choices and rights

• Access and correct your data in the dashboard, or ask us for a copy.
• Delete conversations automatically with Chat history, disconnect accounts at any time under Integrations, or delete your whole account (see below).
• Withdraw consent to analytics and advertising cookies at any time.

Depending on where you live, you may have more rights:

• EU and UK: to access, correct, delete, restrict or object to processing, to data portability, and to complain to your data protection authority.
• California and other US states: to know what we collect, to delete and correct it, and to opt out of the "sale" or "sharing" of personal data. We don't sell personal data. Using the Meta Pixel can count as "sharing" for advertising, and you can opt out of it in our cookie settings. We won't treat you differently for using these rights.
• Turkey (KVKK): to learn whether your data is processed and request information about it, learn the purpose and the parties it's transferred to, ask for correction or deletion, object to results of automated analysis that affect you, and claim compensation for unlawful processing.
• Saudi Arabia and the Gulf: to be informed, to access, correct and request destruction of your data, and to complain to the competent authority.

To use any of these rights, email support@coagento.com from the address on your account. We answer within 30 days.

Deleting your data

To delete your account and everything in it, open the dashboard and go to Settings > Delete account. Cancel any paid plan on the Billing page first. You can also email support@coagento.com from the address on your account and we'll delete it within 30 days. To revoke Coagento's access to a connected account, disconnect it under Integrations, or remove Coagento in that service's own settings (for example your Google or Facebook account settings).

12. Children

The Service is for businesses and isn't meant for anyone under 16. We don't knowingly collect personal data from children under 16. If you think a child has given us personal data, contact us and we'll delete it.

13. Changes to this policy

We may update this policy as the Service changes. We'll change the date at the top, and if a change is significant, we'll tell you by email or in the dashboard before it takes effect.

14. Contact

Digital Spark Team LLC
support@coagento.com