Privacy Statement

Introduction

Agentwave is an AI agent builder for sales, customer support, and user engagement.

We value your privacy and are committed to protecting your personal information. This Privacy Notice explains how Agentwave collects, uses, shares, and safeguards personal data, in line with the Protection of Personal Information Act (POPIA) of South Africa, the General Data Protection Regulation (GDPR) of the European Union, and other applicable privacy laws.

Because privacy is an ongoing responsibility, we may update this notice from time to time to reflect new practices or requirements.

Contacting Us About Data Protection

Agentwave is headquartered in Ballito, South Africa. For any inquiries or concerns about your personal information, or to exercise your privacy rights, you may contact our dedicated Privacy Team.

If you are located in South Africa, you also have the right to contact the Information Regulator (established under POPIA) should you wish to lodge a complaint.

How We Collect and Use Your Personal Information

Agentwave collects personal information directly from you and, at times, from third parties (such as LinkedIn or other publicly available sources). This may include:

• Name
• Job title
• Employer name
• Work address
• Work email
• Work phone number

We process this information to:

• Provide our products and services
• Communicate with customers and prospects
• Improve our offerings and website experience
• Comply with legal and regulatory obligations

We do not sell your personal data. We share it only with trusted partners who enable us to deliver our services.

Use of the Agentwave Website

When you use our website, we may automatically collect certain information, including:

• IP address
• Browser type and version
• Device operating system
• General location of access
• Pages viewed and navigation history

This helps us improve our website, troubleshoot issues, and understand how visitors engage with our services.

Cookies and Tracking Technologies

Agentwave uses cookies and tracking technologies to improve user experience. For details on the types of cookies we use and how to manage your preferences, please review our Cookie Policy.

Sharing Information with Third Parties

Your information may be stored on secure servers managed by third-party providers. These providers act only on our instructions and are bound by strict confidentiality and security obligations.

We may share your personal information:

• With your consent or at your request.
• With service providers, vendors, and partners who support our operations.
• To comply with legal requirements, court orders, or regulatory obligations.
• To protect the rights, safety, and property of Agentwave, our employees, customers, or the public.
• In cases of emergency or force majeure.
• In aggregated and anonymized form for research, analytics, or marketing purposes.

International Data Transfers

If you are outside South Africa, your data may be processed in South Africa, the United States, or other countries where our providers operate.

Under POPIA, we ensure that cross-border transfers are made only where the recipient country or organization is subject to laws, agreements, or safeguards that provide comparable protection to POPIA.

Under GDPR, we rely on standard contractual clauses and other safeguards to protect data transferred outside the EEA/UK.

Your Privacy Rights

Under POPIA, GDPR, and other laws, you have rights regarding your personal data. These include:

• Right to be informed – to know what data we collect and how it is used.
• Right of access – to request a copy of the personal data we hold about you.
• Right to rectification – to correct inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") – to request deletion of your personal data, subject to legal requirements.
• Right to restrict processing – to limit how your data is used.
• Right to data portability – to request transfer of your data to another service provider.
• Right to object – to object to certain types of processing, including direct marketing.
• Rights related to automated decision-making and profiling.

To exercise any of these rights, please contact us at privacy@agentwave.co.

If you are based in South Africa and are not satisfied with how we handle your request, you may lodge a complaint with the Information Regulator (South Africa):

Use of Google Workspace APIs

Agentwave uses Google Workspace APIs to provide certain features. Data obtained through these APIs is never used to train generalized AI/ML models. It is used solely to enable specific service functionality, in line with this Privacy Notice.

Data Protection Measures

We take strong technical and organizational measures to safeguard your data:

• Encryption of all data in transit and at rest.
• Access controls based on roles and least-privilege principles.
• Rate limiting to protect against abuse.
• Domain allowlisting for secure embedding of agents.
• Infrastructure security via trusted providers (AWS, Supabase, Vercel).
• Compliance with POPIA, GDPR, and SOC 2.
• No AI training on your private data.

Data Storage and Retention

Your data is stored securely for as long as necessary to provide our services, comply with legal obligations, or achieve business purposes. Once data is no longer required, it will be securely deleted or anonymized.

You may request deletion of your personal data at any time by contacting privacy@agentwave.co.

Children's Data

Agentwave does not knowingly collect or process personal information from children under the age of 18.

Questions, Concerns, or Complaints

If you have any questions, concerns, or would like to exercise your privacy rights, please contact us: