Privacy Policy — Barbed Technology

1. Information We Collect

We collect information you provide directly to us, including:

Contact Information: Your name, email address, phone number, and company name when you fill out our contact form, book a call, or register for services.
Communication Data: Messages, inquiries, and correspondence you send to us via email, contact forms, or during onboarding.
Billing Information: Invoice details, payment records, and billing address necessary for processing transactions (payment processing is handled through third-party processors; we do not store full payment card details).
Agent Interaction Data: Messages, commands, files, and data you share with your AI Agent during normal use (collectively "Client Data").

We also collect certain information automatically when you visit our website:

Usage Data: Pages visited, time spent, referring URLs, and interaction patterns.
Device Data: Browser type, operating system, IP address, and device type.
Cookies: We may use functional cookies to improve website performance and user experience.

2. How We Use Your Information

We use the information we collect for the following purposes:

To provide, operate, and maintain our AI Agent services
To process your onboarding, billing, and account management
To respond to your inquiries, support requests, and communications
To improve and optimize our services, website, and user experience
To comply with legal obligations and enforce our Terms of Service
To send service-related communications, updates, and administrative messages

We will never sell your personal data or Client Data to third parties. We will never use your Client Data to train public AI models or improve third-party AI systems outside of your own Agent's functionality.

3. Lawful Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following lawful bases:

Contractual Necessity: Processing necessary to perform our agreement with you (e.g., providing the Agent service, processing payments).
Legitimate Interests: Processing for our legitimate business interests, such as improving services, fraud prevention, and network security, provided your rights do not override those interests.
Consent: Where we rely on your consent, you may withdraw it at any time.
Legal Obligation: Processing necessary to comply with applicable laws and regulations.

4. Data Sharing and Third Parties

We may share your information with third-party service providers who help us deliver our services. These include:

AI Model Providers: OpenAI, Anthropic, and/or similar LLM providers — your Agent communications pass through these services to generate responses. These providers are contractually prohibited from using your data to train or improve their models unless you have separately agreed to their terms.
Cloud Infrastructure: Hosting and computing resources used to run your Agent. Data is stored in secure US-based data centers.
Telegram: The messaging platform through which you interact with your Agent. Telegram's privacy policy governs the transmission of messages.
Payment Processors: Third-party payment platforms used to process invoices and payments.
Analytics: Basic website analytics (if used) to understand site traffic and improve user experience.

We require all third-party providers to maintain appropriate security measures and contractual protections for your data.

5. Data Retention

We retain your personal data and Client Data only as long as necessary to fulfill the purposes described in this policy:

Active Account: Data is retained for the duration of your service agreement with us.
After Termination: Data is deleted or returned within 30 days of service termination, except where retention is required by law.
Billing Records: Retained for the period required by tax and financial regulations.
Aggregated/Anonymous Data: Non-identifiable, aggregated data may be retained indefinitely for analytical purposes.

6. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your data, including:

Encryption of data in transit (TLS/SSL) and at rest
Access controls and authentication requirements for administrative access
Regular security reviews and updates
Contractual confidentiality obligations on all employees and contractors

No method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security but will promptly notify you of any known data breach that affects your personal data.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete data.
Deletion: Request deletion of your personal data ("Right to be Forgotten").
Portability: Request transfer of your data to another service provider.
Restriction: Request restriction of processing under certain circumstances.
Objection: Object to processing based on legitimate interests.
Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at support@barbedtechnology.com. We will respond within 30 days.

If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority.

8. International Data Transfers

Your data may be transferred to and processed in the United States and other jurisdictions where our service providers operate. When transferring data from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.

9. AI Agent-Specific Privacy

Because our services involve AI agents, we want to be particularly transparent about how your Agent data is handled:

Messages you send to your Agent are processed by our AI model providers to generate responses. We configure these providers to not use your data for model training.
Agent memory (information your Agent stores about you to provide personalized service) is retained on our infrastructure and is accessible only to you and us for service delivery purposes.
We do not monitor the content of your Agent conversations for any purpose other than troubleshooting, security, and service improvement with your consent.
You control your data. Upon termination, your Agent's memory and associated data are deleted within 30 days.

10. California Privacy Rights (CCPA)

California residents have the following additional rights under the California Consumer Privacy Act (CCPA):

Right to Know: Request disclosure of the categories and specific pieces of personal data we have collected about you.
Right to Delete: Request deletion of personal data we have collected, subject to certain exceptions.
Right to Opt-Out: We do not sell personal data. You have the right to opt out of any future sale of personal data.
Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise your CCPA rights, contact us at support@barbedtechnology.com.

11. Cookies

Our website may use minimal functional cookies necessary for website operation. We do not use tracking cookies or third-party advertising cookies. You can configure your browser to block or alert you about cookies.

12. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to active clients and by posting a notice on our website. Your continued use of our services after changes take effect constitutes acceptance of the updated policy.

14. Contact

For questions, concerns, or requests regarding this Privacy Policy or your personal data:

Email: support@barbedtechnology.com
Business: Barbed Technology