Privacy policy

Scope

This policy describes how iVALT AgentFlow (“we,” “us”) handles information when you use our marketing website, register for TrustLoop beta access, or create and use an AgentFlow operator workspace through our dashboard (including sign-up, email verification, onboarding, and team invitations).

When your organization uses AgentFlow to process approvals, audit records, or other data about your customers or employees, that processing is also governed by your organization’s agreement with us (for example an evaluation agreement, order form, or data processing addendum). This policy explains what we collect directly from you as a site visitor or workspace operator; it does not replace your employer’s privacy notices to its own users.

Information we collect

Depending on how you interact with us, we may collect:

• Contact and inquiry details you submit through the contact form (for example name, work email, company, and message content).
• TrustLoop beta signup details when you request TestFlight or Play beta access (work email and platform choice).
• Workspace registration details when you start an AgentFlow workspace: your name, work email, and company name, plus your acceptance of our terms and this policy.
• Authentication and security data such as one-time email codes, passwordless sign-in sessions, invite tokens, and related logs needed to verify your identity and protect accounts.
• Onboarding and workspace profile information you choose to provide after sign-up (for example display name, website, industry, country, timezone, company size, expected usage volumes, use cases, compliance interests, and referral source).
• Team invitation details when a workspace admin invites another operator (invitee email address and invitation status).
• Product usage and audit metadata generated when you use the dashboard (for example actions you take as an operator, tenant identifiers, and security events we record in our audit chain).
• Technical data such as IP address, browser type, and pages or endpoints accessed, collected in server logs for security, rate limiting, and reliability.
• Theme preference stored locally in your browser (localStorage) when you choose light or dark mode on the marketing site or dashboard.

How we use information

We use the information above to:

• Respond to partnership and product inquiries.
• Manage TrustLoop beta tester lists and send install or update instructions.
• Create and administer evaluation workspaces, verify email addresses, onboard tenants, and deliver transactional messages (such as sign-in codes, welcome email, operator invitations, and account notices).
• Operate, secure, troubleshoot, and improve the website and AgentFlow platform.
• Enforce rate limits, prevent abuse, and investigate security incidents.
• Comply with law and enforce our terms.

We do not sell your personal information. We do not use the marketing site or self-serve sign-up flow to monetize your data through advertising networks.

Sharing and processors

We may share information with service providers that help us run the site and platform (for example cloud hosting, transactional email delivery such as Resend or Amazon SES, webhook automation for beta signups, and infrastructure monitoring), subject to confidentiality and data-processing terms appropriate to the service.

Workspace admins may see information about operators and invitations within their tenant. We may also disclose information if required by law or to protect our rights, users, or the public.

Retention

We retain contact and beta signup records for as long as needed to fulfill the purposes above, unless a longer period is required by law. Server logs are kept for a limited period for security and troubleshooting.

If you start workspace registration but do not verify your email and activate the workspace, we may delete the pending workspace and associated sign-up data within about 24 hours after registration.

Active workspace data is retained while your evaluation or commercial relationship continues and as described in your organization’s agreement with us, including configurable audit retention for tenant operational data where applicable.

Your choices and rights

You may clear site preferences by removing stored data in your browser. Workspace operators can manage team invitations and profile fields in the dashboard where those controls are available.

Depending on where you live, you may have rights to access, correct, delete, or restrict certain processing of your personal information. To exercise these rights or ask questions, contact us at the contact page.

Changes

We may update this policy from time to time. The “Last updated” date at the top of this page indicates when it was last revised. Material changes may also be communicated through the dashboard or by email where appropriate.