agentor stores what consultants teach their agents and the questions their clients ask, so the agent can answer and the consultant can follow up. It never reads anyone's disk and runs no AI of its own: the consultant's coding agent sends text, and the client's own AI writes the answers. If you are a client, your consultant decides what happens with your questions; we look after them on their behalf.Who is responsible
agentor is a service of Innovate d.o.o., Ljubljana, Slovenia. Questions, requests and complaints: bruno@innovate.si.
- For consultant accounts (your email, display name and contact record), Innovate d.o.o. is the controller.
- For the data about a consultant's clients (their email addresses, the questions they ask, the answers they receive) and for the know-how, the consultant is the controller and Innovate d.o.o. processes it on their behalf and on their instructions, which are the settings and actions in agentor. If you are a client, ask your consultant first; we will help them answer you, and you can always write to us.
How the service works, in data terms
Consultants sign in with their email and create agents. They add know-how in the dashboard or through their own coding agent, which reads files on the consultant's computer and sends their text; the agentor server never reads anyone's disk. Text that looks like a key, a password, a card number or an IBAN is removed or refused before it is stored.
Clients are invited by a consultant by email and connect their own AI tool to that consultant's agent. When a client asks, agentor searches the agent's know-how and returns the matching passages to the client's AI, which writes the answer. Only the question (and, sometimes, a one-line note from the client's AI on what they are working on) reaches agentor; the rest of the client's conversation stays between them and their AI provider. Secrets are removed from questions before they are stored or emailed.
When the know-how does not answer a question, it becomes an open question for the consultant, who sees the client's email address, the question and what was found. The consultant's answer is emailed to the client, shown in their AI next time they ask, and usually saved as know-how so the agent can answer it from then on. A client sees only their own questions and answers, only for agents they were invited to; consultants never see each other's data.
What we keep, and for how long
| What | Why | How long |
|---|---|---|
| Consultants: your email address, the display name you choose, and a contact record created when you first sign in | To sign you in with a one-time link, to send you the emails the service needs, and to know who uses agentor (providing the service, Art. 6(1)(b) GDPR; the contact record on legitimate interest, Art. 6(1)(f)) | The account until you delete it in the dashboard (Account → delete); the contact record 3 years from your last sign-in, or until you ask us to delete it |
| Your agents and their know-how: names, persona settings, and the text items you or your coding agent add (notes, documents' text, questions and answers, pointers, links), with their source names | So your agent can answer your clients | Until you remove the item, delete the agent or delete your account |
| Your clients: the email addresses you invite, the name you give them, and their status (invited, connected, removed) with dates | So only the people you invite can ask your agent, and you can see who did | Until you remove the client, delete the agent or your account. An unused invitation expires after 14 days |
| Questions clients ask (the conversation log): the question, an optional short note from the client's AI on what they work on, the confidence, which know-how items were found, and whether it went to you | So you can see what your clients need and how well the know-how covers it | 180 days, then deleted automatically |
| Open questions and your answers: the question, what was found, the client AI's note on what was missing, your answer or dismissal | So you can answer, and so your client receives the answer | Until you delete the agent or your account. An answer you saved as know-how stays as an item you can edit or remove |
| Sign-in links, 6-digit codes and connection tokens | To keep tools connected without a password | Links and codes 15 minutes; access tokens 24 hours; refresh tokens 90 days; dashboard and connect-page sessions 30 days from your last visit |
| Rate-limit counters (a one-way hash of an account or network address) | To stop abuse | Between one minute and one day |
| Anonymous page counts and usage counters: page path, event name, a coarse source on arrival; counts of tool calls per day | To know which pages and features help | Day totals only, kept up to 400 days. No cookie, no IP address, no identifier |
Emails
We send emails only for the service: sign-in links and codes; a short how-to when a consultant first signs in; invitations to clients (sent at the consultant's request); to consultants, one short summary of new open questions, at most about once an hour; to clients, the consultant's answer; and, if a consultant chooses, a notice when access ends. No newsletter, no marketing lists, no tracking pixels.
Cookies
This site sets no cookies and runs no analytics service. Two strictly necessary cookies exist only on the sign-in, dashboard and connect pages (/app and /join): ag_signin ties a sign-in link to the browser that asked for it, for up to 20 minutes, and ag_sess keeps you signed in to the dashboard or your connect page, for 30 days from your last visit. Signing out deletes it.
The site keeps one small note in your browser's own storage, never sent to us: the tool you last picked in a connect box (ag.host).
Anonymous counts
Each page sends a tiny anonymous signal to our server: the page path, an event name (such as "view" or "copied a connect line") and, on arrival, a coarse source such as "google" or "direct". The server adds one to a daily total and keeps nothing else: no cookie, no IP address, no identifier. A one-way hash of the network address, valid for one minute, protects the counter against floods.
Who helps us
| Service | What it does for us | Where |
|---|---|---|
| Cloudflare, Inc. | Hosts this site, the agentor server and the dashboard, and stores the records above | Global edge network; EU Standard Contractual Clauses |
| Resend, Inc. | Sends the sign-in, invitation, answer and notification emails | United States; EU Standard Contractual Clauses |
We do not sell personal data, do not use know-how or questions to train any AI, and do not share them with anyone else, except where the law requires it.
Your rights
You can ask for a copy of your data, its correction or deletion, a restriction of processing, data portability, and you can object to processing based on legitimate interest. Consultants can export and delete their know-how, remove clients and delete their whole account in the dashboard. Clients can remove their own access from their connect page; for anything else, ask your consultant or write to bruno@innovate.si. We answer within one month. You may also complain to the Slovenian data protection authority, the Information Commissioner (Informacijski pooblaščenec, www.ip-rs.si), or the authority where you live.
Changes
If what we keep changes, this page changes first, with a new date at the top.