Privacy Policy

1. Data We Collect

We collect three categories of data in connection with our engagements.

Agency Data. Information you provide to facilitate our engagement: contact details, billing information, and the operational metrics necessary to deliver our services.

Candidate and Client Data. Information regarding your Most Placeable Candidates (MPCs) and your target hiring managers: resumes, professional profiles, contact information, and interview schedules. You are and remain the data controller for all candidate and client data you provide to us. We operate strictly as the data processor acting on your instruction.

This category includes two sub-types with different handling on engagement end: (a) Client-owned assets, targeting lists, outreach copy, and MPC Showcase materials created during the engagement, are your property under the Terms & Conditions and are returned to you on engagement completion, not destroyed; and (b) AgentleBots-held data, MPC profiles, resumes, contact records, and operational data held in AgentleBots' own systems, are destroyed upon engagement end, as described in Section 5.

Website Data. Standard web telemetry and the information you submit when booking via Cal.com. This data is used solely to facilitate and communicate about the booking.

2. How We Use Data

We use your data exclusively to execute our services:

• To build MPC Showcase profiles and conduct targeted outreach to hiring managers.
• To score candidate pools against your active requirements.
• To communicate with you regarding your engagement.
• To verify and audit placement attributions under Core Offer engagements, where the Terms & Conditions grant us that right.

We do not sell your data. We do not use your candidate data to enrich a centralised database shared across clients. We do not market to your candidates or clients for our own purposes. We do not use data from one client engagement to benefit any other client.

3. Strict Data Isolation

We enforce strict technical isolation between clients. Client data is partitioned at the infrastructure level: separate browser profiles, separate tooling accounts, separate AI context windows. Your candidate pipelines, targeting lists, and client relationships are never accessible to, commingled with, or visible to any other AgentleBots client, whether accidentally or by design.

This isolation is a structural constraint built into our delivery infrastructure. It is not dependent solely on human adherence to a policy.

4. Third-Party Infrastructure

To deliver our services, we route data through third-party APIs. Current active processors include: AI Providers [The list is updated as per current industry trends and best practices] (candidate scoring and content generation), Apollo (contact data and outreach), LinkedIn (outreach and candidate research), and Cal.com (booking management). These providers process data strictly to execute the functions we direct. They are not permitted to use your data for their own model training or independent marketing under our usage agreements with them.

We will notify you in writing if we add a material new third-party processor to your active engagement. A full list of current processors is available on written request at any time.

5. Retention, Return, and Deletion

We retain your data for the duration of our active engagement. What happens at engagement end depends on the data type.

Client-owned assets (returned, not deleted). Targeting lists, outreach copy, and MPC Showcase materials are your property and are transferred to you on engagement completion or on the terms set out in the Terms & Conditions for early termination. These are not destroyed, they are handed over.

AgentleBots-held data (destroyed). MPC profiles, resumes, contact records, interview schedules, and operational data held within AgentleBots' own systems are destroyed from our active systems within 30 days of the later of: (a) the engagement termination date, or (b) receipt of a written deletion request from you. Backups containing your data are purged within a further 30 days following the active system deletion.

Survival of revenue-share records. Under Core Offer engagements, we retain only the minimum placement attribution records necessary to verify revenue share obligations for the 6-month post-termination period during which the revenue share survives under the Terms & Conditions. These records are destroyed immediately upon expiry of that period.

Verification. We will provide written confirmation of deletion completion within 5 business days of the deletion being carried out. If you require third-party or audited verification of deletion, contact us; this can be arranged and the reasonable cost of doing so will be agreed in advance.

6. Your Rights

You have the right to request access to, correction of, or deletion of personal data we hold about you or your candidates at any time. Requests are processed within 30 days of receipt. Where we are acting as data processor under your instruction as data controller, certain requests, particularly deletion of candidate data, require your written authorisation as data controller before we act, to ensure we are acting consistently with your own obligations to those individuals.

7. Contact

To request data access, correction, deletion, or third-party deletion verification, or to ask questions about this policy, contact us at: theredprimordial@gmail.com