Privacy Notice

AGISALT Inc.
Last updated: 12 June 2026

1. Who we are and what this covers

AGISALT Inc. ("AGISALT," "we," "us") is a Delaware corporation with offices at 700 Commerce Drive, Suite 500, Oak Brook, Illinois 60523, United States.

This Privacy Notice explains how we handle personal data when you visit agisalt.com, when you interact with the AGISALT assistant on this site, when you contact us, and when we work with you as a customer, prospect, partner or supplier.

This Notice does not cover customer data inside a delivery engagement. When AGISALT builds and runs agents for a customer, that customer decides what data is processed and why. AGISALT acts on the customer's instructions under a signed Data Processing Agreement, and the customer's own privacy notice governs. If you are an employee or customer of an AGISALT customer and you have a question about your data, contact that organisation first.

2. The short version

3. Personal data we collect

You give us:

• Identification data: name, work email, phone, employer, job title.
• Communications: messages you send us, support requests, meeting notes, and what you type into the AGISALT assistant.
• Marketing preferences: how you found us, what you asked about, what you subscribed to.
• Recruitment data: if you apply for a role, your CV and the information in your application.

We collect automatically:

• Device and technical data: IP address, browser type, operating system, device identifiers, referring page.
• Usage data: pages viewed, time on page, links followed, and assistant session logs.
• Cookie and measurement data, only if you agree to it: see section 7.
• Interaction data, only if you agree to session replay: pointer movement, scrolling and clicks, recorded to show us where the site confuses people. Text you type into any field is masked before it leaves your browser, as are numbers and email addresses appearing in the page.

We receive from others:

• Business contact data from Microsoft co-sell and partner channels where you have engaged with a joint opportunity.
• Publicly available business information used to prepare for a meeting you have requested.

We do not use visitor-enrichment, intent-data or reverse-IP-lookup tools. We do not try to work out who you are from your IP address.

4. The AGISALT assistant

The assistant on this site is an AI agent. It is not a human being, and it will tell you so.

• What it stores. Your conversation, including anything you type into it, is stored on AGISALT-operated infrastructure in Microsoft Azure. It is not stored in your organisation's Microsoft tenant.
• What it is used for. To answer your question, to route you to the right person, and to improve how the assistant answers. We review conversations to correct errors and improve quality.
• Model provider. The assistant sends your messages to a foundation model service to generate a reply. That service is operated by Microsoft as part of Azure.
• Use of conversations. AGISALT reviews conversations and uses them to improve the assistant, including correcting errors, improving responses and refining the source material the assistant draws on. AGISALT does not permit its model provider to use conversations to train that provider's models.
• Restricted information. Do not enter protected health information, payment card numbers, government identification numbers, credentials, or information subject to export control or classification into the assistant. Where such information is relevant to your enquiry, request that the assistant arrange a call.
• No binding effect. Statements made by the assistant do not bind AGISALT. See the Terms of Use.

• How long it is kept. 12 months. See section 10.

5. How we use personal data

We do not use personal data to make decisions that produce legal or similarly significant effects about you without human involvement.

6. Legal bases (EEA, UK and Switzerland)

• Performance of a contract, to deliver services you or your employer have contracted for.
• Legitimate interests, to operate, secure, market and improve our business, balanced against your rights. Where we rely on legitimate interests for marketing, you can object at any time.
• Consent, for non-essential cookies and for certain marketing. You can withdraw consent at any time without affecting processing already carried out.
• Legal obligation, where the law requires us to process or retain data.

7. Cookies and similar technologies

This site sets no cookies of its own. No cookie is required for the site to function, and declining does not restrict your access to it.

Two measurement tools can set cookies, and neither loads until you agree to it:

• Google Analytics 4, which counts pages and sessions. IP anonymisation is on and it is not linked to Google Ads, so it sets no advertising cookies.
• Microsoft Clarity, which records pointer movement, scrolling and clicks and aggregates them into heatmaps. Typed text, numbers and email addresses are masked before they leave your browser. Agreeing to Clarity means Microsoft can recognise your browser across its own properties through an identifier called MUID, which is a broader consequence than the recording itself.

Every cookie either tool sets is named, with its purpose, party and lifetime, on our Cookie policy page. That page is the authoritative list and we do not repeat it here, so the two can never disagree.

You can change your choice at any time through Cookie preferences in the footer of every page. Turning something off deletes the cookies it set on agisalt.com and reloads the page without the tool. Your choice is stored in your browser and never reaches our servers.

8. Who we share personal data with

• Sub-processors. We use third parties to host, run and support our services. The current list, with the service each provides and where it operates, is published in our Sub-Processor Register on the Trust page. You can subscribe there to be notified when it changes.
• Measurement providers, only if you agree. Google LLC receives analytics data through Google Analytics 4. Microsoft Corporation receives interaction data through Microsoft Clarity. Neither receives anything if you decline or have not yet answered the cookie banner.
• Professional advisers. Lawyers, accountants, auditors and insurers, under confidentiality obligations.
• Microsoft. Where you engage with us through a Microsoft co-sell motion or a Microsoft Marketplace offer, we share the business contact and opportunity information needed to run that motion.
• Legal and safety. Where required by law, regulation or legal process, or to establish, exercise or defend legal claims.
• Corporate transactions. In connection with a merger, acquisition, financing or sale of assets, under confidentiality obligations.

AGISALT does not sell personal data. AGISALT does not permit its sub-processors to process personal data for their own purposes.

Your choice about Microsoft Clarity. Clarity sets an identifier called MUID, which Microsoft uses to recognise a browser across its own properties, including for advertising. We do not run Clarity unless you agree to it, and you can turn it off at any time through Cookie preferences or Your Privacy Choices in the footer of every page. We treat turning it off as your opt-out of any sharing of your personal information for cross-context behavioural advertising, whether or not it legally qualifies as sharing.

9. International transfers

AGISALT is based in the United States, and personal data you give us will be processed there. Our sub-processors may process data in other countries.

Where personal data leaves the EEA, the UK or Switzerland, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and any other lawful transfer mechanism that applies. You can request a copy of the relevant safeguards at privacy@agisalt.com.

10. Retention

We keep personal data only as long as we need it for the purpose we collected it, and then delete it or make it non-identifying.

11. Security

We protect personal data using access controls built on Microsoft Entra ID, encryption of data in transit and at rest, logging and monitoring, least-privilege access for our staff, and contractual security obligations on our sub-processors. Our Information Security Policy sets out the controls we operate.

Our security posture is set out on our Trust page. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Your rights

Depending on where you live, you may have the right to:

• know what personal data we hold about you and get a copy of it;
• correct it if it is wrong;
• delete it;
• restrict or object to how we use it;
• receive it in a portable format;
• withdraw consent you have given;
• opt out of sale or sharing (we do neither), and limit the use of sensitive personal information (we do not use it for the purposes that trigger this right);
• appeal a decision we make about your request, where your state's law provides for an appeal.

How to exercise them: email privacy@agisalt.com. We will verify your identity before acting, usually by confirming control of the email address on the account or enquiry. We respond within the period your law requires (45 days under most US state laws, extendable once; one month under the UK and EU GDPR, extendable by two months for complex requests). An authorised agent may submit a request on your behalf with written proof of authority.

We will not discriminate against you for exercising these rights.

Complaints. If you are in the EEA, the UK or Switzerland, you have the right to lodge a complaint with your local supervisory authority.

13. Notice for United States residents

Categories of personal information we have collected in the last twelve months, using the categories defined by the California Consumer Privacy Act:

We do not sell personal information, including the personal information of anyone under 16.

Where you have consented to Microsoft Clarity, Microsoft receives interaction data and sets an advertising identifier on its own domains. You can withdraw that at any time through Your Privacy Choices in the footer, and we treat withdrawal as an opt-out of sharing for cross-context behavioural advertising. Withdrawal stops collection rather than merely recording that you asked for it.

14. Children

This site and our services are for business use and are not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, email privacy@agisalt.com and we will delete it.

15. Changes to this Notice

We may update this Notice. When we make a material change we will update the date at the top, post the change on our Trust page, and where the law requires it, tell you directly.

16. Contact

Privacy questions and rights requests: privacy@agisalt.com
Postal: AGISALT Inc., Attn: Privacy, 700 Commerce Drive, Suite 500, Oak Brook, IL 60523, United States