Privacy Policy

1. Who We Are

ISP Solutions LLP ("we", "Agesta AI") operates the Agesta AI SaaS platform for autonomous AI-powered project management at agesta.ai. ISP Solutions LLP is the data controller for all personal data processed through the platform.

2. What Data We Collect

We do not collect payment card data directly — payments are handled by our payment processor.

3. How We Collect Data

OAuth (Google / LinkedIn). When you sign in via Google or LinkedIn, you authorize us to receive a limited profile dataset. We request only the minimum scopes needed:

• Google: name, email address, profile photo
• LinkedIn: name, email address, headline, profile URL

We do not access Google Drive, Gmail, LinkedIn messages, connections, or any data outside approved scopes. You can revoke access at any time via your Google account settings or LinkedIn account settings.

Direct use. Data you enter into the platform (projects, tasks, documents, agent configurations) is stored to provide the service.

Automatically. Server logs and application telemetry are collected to maintain reliability and security.

4. Legal Basis for Processing

5. How We Use Your Data

• Authenticate you and maintain your session
• Run AI project management agents on your projects
• Send transactional notifications (account, billing, security)
• Provide customer support
• Improve the platform using aggregated, anonymized usage data
• Meet legal and regulatory obligations

We do not use your project data to train shared AI models without your explicit consent.

6. Data Sharing and Sub-processors

We do not sell or rent your personal data. We share data only with:

• Infrastructure sub-processors — cloud hosting and database providers under data processing agreements
• Authentication providers — Google LLC and LinkedIn Corporation, solely to verify identity at login
• Payment processors — to handle subscription billing
• Legal authorities — when required by applicable law or court order

All sub-processors are contractually bound to process data only on our instructions.

7. Data Storage, Security, and Retention

Data is stored on secured servers with TLS 1.2+ encryption in transit and encryption at rest. Access is restricted to authorized personnel.

Retention periods:

• Account and profile data — retained while account is active; deleted within 30 days of deletion request
• Project data — deleted within 30 days of account deletion, or earlier on request
• Server logs — up to 90 days
• Billing records — 7 years as required by law

8. On-Premise Deployments

Agesta AI is available as an on-premise deployment for enterprise clients in regulated industries (banking, oil and gas, government). In on-premise configurations, all data resides entirely within the client's own infrastructure. ISP Solutions LLP has no access to that data. On-premise clients are responsible for their own data security and privacy compliance.

9. International Data Transfers

Agesta AI is operated from Kazakhstan. For users in the EU, UK, or jurisdictions with data transfer restrictions, we ensure appropriate safeguards (e.g., Standard Contractual Clauses). Enterprise clients requiring in-country data residency can use on-premise deployment.

10. Your Rights

Depending on your jurisdiction, you may:

• Access — request a copy of your personal data
• Correct — request correction of inaccurate data
• Delete — request deletion of your account and data
• Port — receive your data in a machine-readable format
• Restrict — request limited processing in certain circumstances
• Object — object to processing based on legitimate interests
• Withdraw consent — for any consent-based processing (e.g., marketing)

To exercise any right, email privacy@agesta.ai. We respond within 30 days.

11. Cookies and Tracking

• Essential cookies — required for authentication and session management. Cannot be disabled.
• Analytics cookies — aggregated, anonymized usage data. You can opt out via browser settings.

We do not use advertising or third-party tracking cookies.

12. Children's Privacy

Agesta AI is a professional B2B platform for users 18 and over. We do not knowingly collect data from minors. Accounts identified as belonging to minors will be deleted promptly.

13. Changes to This Policy

We may update this policy. For material changes, we will notify you by email or in-app notice at least 14 days before the change takes effect. The effective date above reflects the latest revision. Continued use after the effective date constitutes acceptance.

14. Contact

ISP Solutions LLP
Almaty, Republic of Kazakhstan
privacy@agesta.ai
Response time: within 30 days