Privacy Policy

1. Who we are

OwlAgent ("OwlAgent", "we", "us") provides an AI personal assistant that you interact with on WhatsApp and that can act on the accounts you connect — such as your email, calendar, files, and CRM. Our website is www.owlagent.me.

For any privacy question or request, contact us at lorenzo.trichard@gmail.com.

2. Data we collect

• Account information — your name, email address, and WhatsApp phone number when you sign up.
• Conversation data — the messages you exchange with the assistant on WhatsApp, so it can understand and carry out your requests.
• Connected-service data — when you connect a service (e.g. Gmail, Google Calendar, Google Drive, a CRM) via OAuth, the assistant accesses emails, events, contacts, files, or records only as needed to execute the requests you make. We do not bulk-copy your mailbox or drive.
• Billing data — payments are processed by Stripe. We receive your plan, payment status, and billing email; your full card details never touch our servers.
• Technical data — logs and product analytics (feature usage, errors) used to operate and improve the service.

3. How we use your data

• To execute the requests you send to the assistant and operate the service.
• To provide support, billing, and important service communications.
• To monitor, secure, and improve the product.

We never sell your personal data and never share it with third parties for their marketing. We do not use the content of your emails, files, or messages to train AI models.

4. Connected accounts and OAuth

All connections to third-party services use OAuth: you grant access explicitly on the provider's own consent screen, we never see or store your passwords, and you can revoke access at any time from the provider's security settings or by asking us.

OwlAgent's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Service providers

We share data only with the providers required to run OwlAgent, under contracts that restrict how they may use it:

• Hetzner — hosting, in European Union data centers.
• Stripe — payment processing.
• Meta (WhatsApp Business Platform) — message delivery on WhatsApp.
• AI model providers — the text of your requests is processed by large-language-model providers to generate the assistant's responses, under agreements that prohibit using your data for model training.
• Email delivery provider — transactional emails (receipts, service notices).

Your data is hosted in the EU. Some providers may process limited data outside the EU; where that happens, transfers rely on safeguards such as the EU Standard Contractual Clauses.

6. Data retention

We keep your data while your account is active. When you close your account or ask us to, we delete your personal data within 30 days, except what we must keep for legal or accounting obligations (e.g. invoices).

7. Your rights

Under the GDPR you can request access to, correction of, deletion of, or a portable copy of your personal data, and you can object to or restrict certain processing. Email us at lorenzo.trichard@gmail.com and we will respond within 30 days. You also have the right to lodge a complaint with your supervisory authority (in France, the CNIL).

8. Security

We describe our security measures on our Security page: OAuth-only access, encryption in transit, EU hosting, and least-privilege access to production systems.

9. Children

OwlAgent is not intended for anyone under 16, and we do not knowingly collect data from children.

10. Changes to this policy

If we make material changes, we will update the effective date above and notify active users by email or WhatsApp before the changes take effect.

11. Contact

Questions about this policy or your data: lorenzo.trichard@gmail.com.