Dot.Agents is built on a foundation of trust. We handle your data with the same governance standards we build into our platform — transparent, controlled, and accountable.
In This Document
Who We Are
Dot.Agents ("we", "us", "our") is the operator of the Dot.Agents Adaptive Enterprise Operating System. We are the data controller for personal information processed in connection with the Service.
This Privacy Policy explains how we collect, use, store, protect, and share information when you access or use our platform at dotagents.com and all associated subdomains, APIs, and applications.
Information We Collect
2.1 Information You Provide
- Account registration data (name, email address, password)
- Organization profile (company name, domain, industry, size)
- Billing information (processed and stored securely by our payment provider)
- Organizational DNA configuration (mission, vision, values, risk appetite)
- Agent configurations, workflows, and deployment settings
- Content submitted to agents (prompts, documents, messages)
- Support communications and feedback
2.2 Information We Collect Automatically
- Log data (IP address, browser type, operating system, pages visited, timestamps)
- Usage data (features accessed, agent interactions, workflow executions)
- Session data (authentication tokens, session identifiers)
- Device information (device type, screen resolution, timezone)
- Performance data (API response times, error rates)
2.3 Information from Third Parties
- Social account data when you connect platforms (Facebook, Instagram, LinkedIn, WhatsApp Business, TikTok, X) — limited to what is necessary for agent operations
- Identity data from SSO or OAuth providers if used for login
- Payment verification data from our billing processor
How We Use Your Information
AI Processing & Agent Data
Agent Inputs. Content you submit to agents (prompts, documents, instructions) is processed by AI models to generate responses. This data is logged as part of the governance audit trail and may be subject to our delusion detection and moderation systems.
Decision Logs. Every agent decision is stored in a decision log linked to your organization. These logs contain: the input hash, the agent's output, confidence score, delusion risk score, and any approval or escalation events. Decision logs are retained as part of your governance record.
Enterprise Memory. Content stored in the Enterprise Memory Cortex is owned by your organization. Memory entries are scoped exclusively to your tenant and are not shared with other organizations or used to train shared AI models.
AI Model Providers. We use third-party AI model providers (including OpenAI) to power agent inference. Data sent to these providers is governed by their respective terms and privacy policies. We have data processing agreements in place with all AI model providers. We do not enable model training on your data by default.
Social Account Data. When you connect social platforms, we access only the permissions you explicitly grant. Social account tokens are encrypted at rest. We do not sell or share social account data with third parties outside of the connected platform's own API interactions.
International Transfers
Dot.Agents operates globally. Your data may be stored and processed in countries outside your country of residence, including South Africa, the United States, and the European Union.
For transfers involving personal data of individuals in the European Economic Area (EEA) or United Kingdom, we rely on Standard Contractual Clauses approved by the European Commission or equivalent mechanisms.
For South African residents, we comply with the Protection of Personal Information Act (POPIA) and the cross-border transfer provisions of POPIA Section 72.
Data Retention
Security
We implement enterprise-grade security controls to protect your data:
In the event of a personal data breach, we will notify affected users and relevant supervisory authorities within the timeframes required by applicable law.
Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
To exercise your rights, contact our Data Protection Officer at privacy@dotagents.com. We will respond within 30 days (or as required by applicable law).
Children's Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us at privacy@dotagents.com and we will take steps to delete such data.
Third-Party Services
The platform integrates with third-party services. When you connect or use these services, your data may be processed by those third parties under their own privacy policies:
OpenAI
AI model inference for agent responses
Stripe
Payment processing and billing management
Sentry
Error monitoring and performance tracking
Redis
Session and queue management
Facebook/Meta
Social account integration (when connected)
Social account integration (when connected)
TikTok
Social account integration (when connected)
X (Twitter)
Social account integration (when connected)
Changes to This Policy
We may update this Privacy Policy periodically. When we make material changes, we will notify you by email and post a notice within the platform at least 14 days before the changes take effect.
The "Last updated" date at the top of this page reflects when changes were last made. Continued use of the Service after the effective date constitutes acceptance of the updated Policy.
Contact & Data Protection Officer
For privacy enquiries, rights requests, or to reach our Data Protection Officer:
South African residents may also lodge a complaint with the Information Regulator (South Africa) at inforegulator.org.za.