Privacy Notice

Who is responsible

EXCENT RIT SERVICES LTD, company number 06455789, of 20-22 Wenlock Road, London N1 7GU, United Kingdom, is the data controller for the personal data described here. This notice covers both the website and the product.

For anything about your data, write to [email protected].

What we collect

Account data: your name and email address, the workspace you create, and how you signed in. If you sign in with Google we receive your name, email address and profile picture from Google, and never your password.

Content you provide: the documents, files, text and settings you upload to ground your agents, and the messages exchanged with them.

Usage data: which model calls your agents made, what they cost, and when — the record that produces your balance and your invoices. Plus ordinary server logs, including IP address, for security and diagnosis.

Billing data: your billing name, address, VAT number where you give one, and a record of what you bought. We do not see or store your card number — payment is taken on the payment provider's own hosted page.

Channel data: if you connect WhatsApp, Telegram or text messaging, the messages sent to your agents through those channels and the sender's identifier on that platform.

If you use the waitlist form on this website, the email address and any note you type into it. There is no analytics script, no advertising pixel and no third-party tracking tag on this website.

Why we use it, and our lawful basis

To provide the service you asked for — running your agents, storing your content, keeping your balance — because we need to in order to perform our contract with you.

To take payment, issue invoices and keep accounting records, because we must perform the contract and because the law requires us to keep those records.

To keep the platform secure, prevent abuse, and diagnose faults, because we have a legitimate interest in a service that works and is not misused.

To tell you about something important — a security issue, a change to these terms, a problem with a payment — because we must perform the contract or comply with the law. We do not send marketing email unless you ask for it.

Who else processes it

We use third parties to run the service. They act on our instructions and may only use the data to provide their service to us:

Google Cloud — hosting, databases and file storage

Google — AI models, and sign-in if you use a Google account

Anthropic — AI models

Groq and Perplexity — AI models and web search

Sarvam AI — speech recognition and synthesis for Indian languages

Cloudflare — storage for images and other media

Mailgun — sending and receiving email on behalf of your agents

Stripe and Revolut — payments and identity verification

Twilio — text messages, where you enable them

Meta (WhatsApp) and Telegram — messaging, where you connect those channels

Browserbase — browsing pages on your instruction, where you enable it

Your content is sent to AI model providers so your agents can produce answers. We do not use your content to train AI models, and we choose providers on terms intended to prevent them doing so on our behalf.

We do not sell personal data, and we do not share it for advertising.

Where your data is held

The platform runs on Google Cloud in the United States (region us-central1), so your account data and content are stored there. Some of the providers listed above also process data in the United States or elsewhere.

This means personal data leaves the United Kingdom. Where it does, we rely on the transfer safeguards the law provides — the UK International Data Transfer Addendum to the European Commission's standard contractual clauses, or an adequacy regulation where one applies to the country concerned.

If where your data is held matters to you — because of a regulator, a client, or your own policy — tell us before you build anything on the platform, so we can be straight with you about what is possible.

How long we keep it

Content and account data for as long as your account is open. When you close it, we delete your content and account data within 30 days, other than anything we must keep.

Billing and tax records for six years after the end of the financial year they relate to, because UK tax law requires it. Usage records are kept for as long as they are needed to support an invoice.

Server logs for up to 90 days.

Your rights

You can ask for a copy of your personal data, ask us to correct it, ask us to delete it, ask us to restrict how we use it, object to processing we do on the basis of legitimate interests, and ask for your data in a portable form.

To exercise any of these, write to [email protected]. We respond within one month. We will not charge you, and we will not treat you differently for asking.

If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk.

Cookies and what your browser stores

This website sets no cookies. Your theme preference and language choice are kept in your browser's own storage and never sent to us.

The product sets a cookie to keep you signed in. It is necessary for the service to work and is not used for tracking or advertising.

Security

Each customer's data is isolated at the database level rather than by a filter in application code. Access to production systems is limited to the people who need it. Data is encrypted in transit and at rest.

No system is perfectly secure. If a breach affects your personal data and is likely to present a risk to you, we will tell you and the Information Commissioner's Office within the time the law requires.

Changes to this notice

If we change how we use personal data we will update this notice and change the date at the top. Where a change matters to you, we will tell you rather than rely on you noticing.