Privacy Policy

Effective date: September 5, 2026

At ByAgentX LLC ("ByAgentX"), we take your privacy seriously. This Privacy Policy explains what information we collect, how we use it, and how we protect it when you use our AI automation services at byagentx.ai.

1. Information We Collect

We collect minimal information necessary to provide our services:

• Name and email address — when you make a presales inquiry, sign up, or purchase a plan.
• Phone number and inquiry messages — when you choose to provide a phone number in a Meta Instant Form or contact us through WhatsApp, we receive the number associated with that interaction, your inquiry details, and related form or messaging identifiers.
• Payment information — handled entirely by Stripe. We never see or store your full card details.
• Business details — company, service area, lead-volume range, and any context you choose to share in a presales inquiry or during onboarding.
• Usage and campaign data — page URL and title, referrer and campaign parameters, approximate device/browser characteristics, and a pseudonymous browser identifier used by Google Analytics. This data is not anonymous, although ByAgentX does not intentionally send the name, email, company, or free-text message from the systems-call form to Google Analytics.

2. How We Use Your Information

• To process payments, record confirmed paid orders, and provide purchased services.
• To respond to presales inquiries and contact you for onboarding, setup, and support.
• To follow up on presales information you request through our website, Meta Instant Forms, or WhatsApp, and route your inquiry to our team for a response.
• To send important account and service updates.
• To improve our services and website experience.

We do not sell or rent inquiry contact details. If you allow optional Meta measurement, browser activity is shared with Meta for advertising measurement as described below.

When you send the systems-call form, ByAgentX stores the details you provide so we can reply about your request. If online delivery fails, the page offers an email fallback that you can choose to send through your own email provider.

3. Payment Processing

All payments are processed securely through Stripe, a PCI-compliant payment processor. When you complete a purchase, your payment details are transmitted directly to Stripe and are never stored on our servers. Stripe's privacy policy applies to all payment transactions: stripe.com/privacy.

4. Data Sharing

We share your information only with the service providers necessary to operate our business:

• Stripe — payment processing.
• Email service providers — to receive and deliver presales, transactional, onboarding, and support emails that you choose to send.
• Meta and WhatsApp — to receive Instant Form submissions and exchange messages related to your inquiry, including the contact details, inquiry content, and form or messaging identifiers needed for that interaction.
• Telegram — to deliver internal inquiry and conversation notifications to our team. These notifications may contain contact details, business information, and message content needed to respond to your request.
• Google Analytics — website and campaign measurement using the usage and campaign data described above.
• Cloudflare — website delivery, security, and abuse prevention.

These providers process data under their applicable contracts, privacy terms, and security obligations. Google explains its analytics data practices at How Google uses information from sites or apps that use its services.

Connected Facebook Pages, Instagram accounts and ad accounts

When a business connects its Facebook Page, Instagram professional account or Meta ad accounts to AgentX with Facebook Login, ByAgentX accesses, only for that business: comments people leave on the business's posts, Page and Instagram insights, and ad performance data (Marketing API insights and answers from Meta's Ads MCP server). We use this data only to show it to that business in AgentX and, when the business turns on the AgentX agent, to reply to comments on the business's behalf.

• Comments — comment text is processed by an AI model that ByAgentX hosts on its own servers; it is not sent to third-party AI providers. We keep the comment, the reply sent and the related Meta IDs only as long as needed to avoid duplicate replies and for audit, and delete them on request (see Section 6).
• Insights and ad data — read when the business opens them in AgentX and not stored, except a log of the action (type, Meta IDs and time).
• Access tokens — encrypted at rest and used only to call Meta's APIs for the business that granted them. "Disconnect" in AgentX deletes the stored token; removing AgentX in Facebook Settings → Business integrations revokes it.

We do not sell this data, share it with third parties, or use it for advertising.

Optional Meta measurement

Meta Pixel (ID 1525400192378547) is off by default. Use the bilingual measurement controls at the bottom of each page to allow it, decline it, or withdraw consent. Your choice is stored in this browser's local storage; clearing site data resets it. The permission to reply to a systems-call request is separate and does not enable Meta measurement.

Only after you allow it, we load Meta's fbevents.js and send a PageView for a page visit and a Lead event with content_name systems_call when our backend confirms a successfully saved systems-call request. Invalid forms, failed requests, email fallbacks and WhatsApp clicks do not generate this Lead event. We do not replay earlier visits or submissions when you later consent.

Meta receives browser/device information, IP address, page URL/referrer and browser or advertising identifiers (including Meta cookies such as _fbp and, when applicable, _fbc). Meta may associate this activity with your Meta account for advertising measurement. We disable automatic event configuration and do not enable advanced matching or send names, emails, phone numbers, business details, or form/message contents in these events. Avoid placing personal information in URLs. See Meta's Privacy Policy.

Withdrawal stops subsequent Meta events from this integration but does not erase data already received by Meta or automatically remove existing cookies. You can clear cookies/site data in your browser. Without JavaScript, this integration sends no Meta events. Existing Google Analytics measurement is unchanged and is not controlled by these Meta-only preferences.

5. Data Retention

We retain presales inquiry information only as long as reasonably needed to respond, evaluate fit, maintain business records, and meet legal or security obligations. Account information is retained while the account is active and for a reasonable period after cancellation. You may request deletion of your data at any time by contacting us.

6. User Data Deletion Instructions

If you want ByAgentX to delete personal data associated with your account, business onboarding, WhatsApp integration, or Meta-connected experience, you can request deletion at any time.

To request deletion, email us at [email protected] with the subject line User Data Deletion Request and include:

• Your name and business name, if applicable.
• The email address or WhatsApp number associated with your ByAgentX account or interaction.
• A short statement that you want your data deleted.

After receiving your request, we will verify the requestor's authority when needed, delete or anonymize personal data that ByAgentX controls, and confirm completion by email. Some information may be retained only when required for legal, security, fraud-prevention, tax, accounting, or dispute-resolution obligations.

For Meta or WhatsApp related data, this deletion process covers data stored or controlled by ByAgentX. You may also manage or remove permissions directly through your Meta, Facebook, Instagram, or WhatsApp account settings.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Opt out of marketing communications at any time.

8. Security

We use industry-standard security measures to protect your information, including encrypted connections (HTTPS) and access controls. However, no method of transmission over the internet is 100% secure.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. Continued use of our services after changes constitutes acceptance of the updated policy.