Question 1

Where is my data stored?

Accepted Answer

Your data is stored in SOC 2 certified data centers in Canada (primary) with encrypted backups. Enterprise customers can choose data residency in Canada, the United States, or the European Union.

Question 2

Is my email data used to train AI models?

Accepted Answer

Never. Your email data is never used to train our AI models or any third-party models. Your data is processed only to provide you with the Agentys service. This is a core principle we will never compromise on.

Question 3

What happens to my data if I cancel?

Accepted Answer

Upon cancellation, all your data is permanently deleted within 30 days. You can request an immediate export of your data before cancellation. We provide a certification of deletion upon request.

Question 4

How does Agentys connect to my email?

Accepted Answer

Agentys uses OAuth 2.0 to connect to Gmail and Outlook. We never see or store your email password. You can revoke access at any time from your email provider's settings.

Question 5

Can Agentys send emails without my approval?

Accepted Answer

No. Every email drafted by Agentys requires your explicit approval before sending. This is a fundamental design principle — you maintain full control over your inbox at all times.

Question 6

How do I report a security vulnerability?

Accepted Answer

Please email security@agentys.io with details of the vulnerability. We follow a responsible disclosure process and will acknowledge your report within 48 hours. See our Vulnerability Disclosure Policy for full details.

Question 7

What third-party services does Agentys use?

Accepted Answer

We maintain a published list of all sub-processors. Key providers include AWS for infrastructure, Google Cloud for AI inference, and Stripe for payments. All sub-processors are bound by DPAs and meet our security requirements.

Question 8

How does Agentys comply with Loi 25?

Accepted Answer

We have designated a Privacy Officer, completed a Privacy Impact Assessment, implemented consent management, and established breach notification procedures in compliance with Quebec's Loi 25. Our privacy policy is available in both English and French.