Privacy Policy

Agentrix — Mengel Enterprises LLC

Effective Date: May 6, 2026 | Last Updated: October 9, 2026

1. Introduction

Mengel Enterprises LLC ("Company," "we," "us," or "our") operates the Agentrix platform at agentrix.studio (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use the Service.

By using the Service, you agree to the practices described in this policy.

2. Information We Collect

2.1 Account Information

When you register, we collect: name, email address, organization name, and billing information (processed and stored by Stripe — we do not store full payment card details).

2.2 Usage Data

We automatically collect information including agent configurations and settings you create, API requests and response metadata, pages and features accessed, session duration, and device/browser information.

2.3 Agent Interaction Data

When you test or run agents, we may collect prompts and inputs submitted during testing and agent outputs for debugging purposes.

We do not use the content of your prompts, agent configurations, or outputs to train our AI models or any third-party models.

2.4 Your End Users' Data

If you deploy agents to your own end users, you are the data controller for their information. We process that data only as your data processor, as directed by your configurations.

2.5 Communications

We retain records of support and other communications you send to us.

2.6 Connected Business Accounts

An organization owner or admin may connect business accounts (for example Google Workspace, Microsoft 365, Slack, HubSpot, GitHub, QuickBooks, Xero, Shopify or Stripe) so the organization's AI workers can act in them. A connection belongs to that organization only. We store the access tokens the provider issues, encrypted, and use them only to perform the reads and actions the organization's workers are configured to do. Actions that change data or send messages wait for a person's approval unless the organization chooses otherwise; refunds always wait for approval.

Data read from a connected account (for example an email, calendar event, file, invoice or order) is processed to complete the worker's task and may be kept in that run's history, which the organization can delete. An owner or admin can disconnect an account at any time in Settings > Connected accounts, and you can also revoke access from the provider's own account settings.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process transactions and manage subscriptions
  • Authenticate users and secure accounts
  • Send transactional communications (billing, security alerts, service updates)
  • Monitor for misuse or violations of our Terms of Service
  • Comply with legal obligations

We do not use your information for behavioral advertising and we do not sell it to third parties.

4. Information Sharing and Disclosure

We may share your information with:

  • Infrastructure and service providers: Azure (Microsoft), Stripe (payments), and other vendors bound by data processing agreements.
  • Your organization administrators: Administrators may view member activity and usage within the account.
  • Legal requirements: When required by law, court order, or government authority.
  • Business transfers: In connection with a merger, acquisition, or asset sale, with prior notice to affected users.

We do not sell personal information.

5. Data Processing and AI

5.1 No Training on Your Data

We do not use your prompts, agent configurations, outputs, or your end users' data to train our AI models or any third-party foundation models.

5.2 Data Storage

Data is stored on Microsoft Azure infrastructure. Data in transit is encrypted using TLS. Data at rest is encrypted using AES-256 or equivalent.

5.3 Data Retention

Account data is retained for the duration of your subscription plus 90 days. API logs are retained for 12 months. You may request deletion of your data at any time.

6. Google User Data

When an organization connects a Google account, Agentrix requests only the access its workers need: reading and searching Gmail messages, creating drafts and sending email, reading and creating Google Calendar events, and finding and reading Google Drive files. We use this data only to provide the user-facing features the organization has set up in Agentrix, as described in section 2.6.

Agentrix's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

  • We do not use Google user data to serve advertisements, and we do not sell it.
  • We do not use Google user data to develop, improve or train generalized or non-personalized AI or machine-learning models. To complete a worker's task, the relevant content is sent to the AI model provider that runs the worker (hosted on Microsoft Azure) under terms that prohibit that provider from training on it.
  • We transfer Google user data to others only as needed to provide or improve the features the organization uses, for security purposes, or to comply with applicable law.
  • Our staff do not read Google user data unless the organization gives us permission for a specific message or file (for example in a support request), it is needed for security purposes such as investigating abuse, or it is required by law.

7. Cookies and Tracking Technologies

We use cookies and Microsoft Application Insights to maintain session state, analyze platform usage, and remember preferences. You may manage cookie preferences through your browser settings.

8. Your Rights

8.1 For All Users

You may access or update account information through platform settings and request deletion by contacting privacy@agentrix.studio.

8.2 California Residents (CCPA)

If you are a California resident, you have the right to:

  • Know: Request disclosure of categories and specific pieces of personal information collected.
  • Delete: Request deletion of personal information, subject to certain exceptions.
  • Opt-Out of Sale: We do not sell personal information.
  • Non-Discrimination: We will not discriminate for exercising your CCPA rights.

To submit a request, email privacy@agentrix.studio with "CCPA Request" in the subject line. We will respond within 45 days.

9. Security

We implement technical and organizational security measures including encryption in transit and at rest, access controls, and monitoring via Microsoft Azure and App Insights.

10. Children's Privacy

The Service is intended for users 18 years of age and older. We do not knowingly collect personal information from individuals under 18.

11. Third-Party Services

Key third parties used by the Service: Microsoft Azure (infrastructure), Stripe (payments), Microsoft Application Insights (analytics), Google/Microsoft OAuth (optional SSO), and the business accounts an organization chooses to connect (section 2.6). Each has its own privacy policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy and will notify you of material changes via email or in-app notification.

13. Contact Us

Mengel Enterprises LLC — Agentrix
Privacy: privacy@agentrix.studio
General: legal@agentrix.studio