This Privacy Policy explains how Agent07 ("Agent07", "we", "us", or "our") collects, uses, stores, discloses, and protects information when you and your organisation use our AI-powered sales assistant platform (the "Service").
Agent07 is built for business use by sales professionals. The Service connects to your email inbox, calendar, CRM data, and cloud storage to automate administrative tasks, draft communications, manage your pipeline, and prepare you for meetings. Given the sensitive nature of this access, we take our privacy obligations seriously and encourage you to read this Policy carefully.
By connecting your accounts and using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.
Agent07 provides an AI-powered assistant that operates on behalf of sales teams by connecting to their existing email inboxes, calendars, CRM records, file attachments, and cloud storage integrations.
This Policy applies to:
Agent07 acts as a data processor on behalf of our Customers for Customer Data (email content, calendar data, CRM records, and files). We act as a data controller for data we collect about users for our own operational purposes (e.g. account administration, security monitoring, product improvement).
When you or your employer creates an Agent07 account, we collect your name, work email address, job title, and details about your organisation. This information is used to set up and manage your account.
This is the most sensitive data Agent07 accesses. Please read carefully.
When you connect your Gmail or Microsoft Outlook account via OAuth, Agent07 accesses and stores the following from your inbox:
We use this content to classify emails by type and urgency, identify deals and contacts, generate AI-drafted responses, surface follow-up tasks, and maintain a synchronised log of your sales communications. Full email bodies are stored in our systems for the duration of your account.
We only process emails where the sender or recipient domain matches an active deal domain you have configured in the Service. Emails outside these domains are not accessed or stored.
When you connect your Google Calendar or Microsoft Calendar account via OAuth, Agent07 accesses and stores:
We use this data to schedule and manage meetings on your behalf, prepare AI-generated meeting briefs, summarise meetings after they occur, generate follow-up tasks, and respond to calendar invitations (RSVP) at your direction. Where you have enabled it, Agent07 may create, modify, or decline calendar events directly in your calendar.
Agent07 stores and manages the following CRM data within the Service:
Agent07 processes and stores file attachments in the following ways:
Attachments and uploaded files are stored in secure cloud storage and associated with the deal or contact they relate to. They are retained for the duration of your account and for up to 90 days following termination.
If you connect your Google Drive account, Agent07 may access:
Agent07 uses Google Drive access to retrieve relevant documents for deal context, surface files associated with contacts or companies, and enable you to attach Drive files to deal records. We access only files and folders within the scope of permissions you grant. We do not access your entire Drive without your explicit authorisation.
You may disconnect your Google Drive integration at any time via your account settings. Upon disconnection, we cease accessing your Drive; previously retrieved file content may be retained as part of your deal records unless you request deletion.
Where you enable meeting transcription, Agent07 may process audio recordings and generate transcripts of calls and meetings. Transcripts are used to produce AI-generated meeting summaries, surface action items, and update deal records. Audio recordings are processed and then deleted; transcripts are retained as part of your deal history.
We automatically collect information about how you interact with the Service, including:
Agent07 uses essential cookies and local storage to maintain your session, remember authentication state, and store user preferences. We do not use advertising or tracking cookies. We may use analytics cookies (such as privacy-friendly, cookieless analytics) to understand aggregate usage patterns. You can manage cookie preferences through your browser settings; however, disabling essential cookies may prevent the Service from functioning correctly.
We use the information we collect for the following purposes:
We do not use your email content, calendar data, CRM records, or file content to serve you advertisements. We do not sell your personal data to third parties.
Agent07 uses artificial intelligence and machine learning to power its core features. Your data — including email bodies, calendar event details, CRM records, meeting transcripts, and document content — is transmitted to and processed by the following third-party AI providers:
These providers act as sub-processors and are contractually prohibited from using your data to train their general models or for purposes beyond performing services on our behalf, regardless of your plan. Both providers operate under enterprise data processing agreements.
Our commitment, by plan:
Paid Plans (Startup, Pro, Enterprise): we do not use your Customer Data — including email content, CRM records, calendar data, meeting transcripts, or documents — to train, fine-tune, or improve any AI or machine learning model, whether ours or any third party's. Your Customer Data is processed solely to deliver the Service to you and remains solely your property. The only exception is feedback you affirmatively and voluntarily choose to submit on an AI output (for example, a rating or written comment), which we may use to improve AI Feature performance.
Free Plan: with your permission, we use your chats, prompts, and AI Feature interactions to train and improve Agent07's AI models and to build stronger safeguards against harmful outputs. You can turn this off at any time in Settings → Data & Privacy.
By using the Service and connecting your accounts, you expressly consent to your data being processed by these AI sub-processors for the purposes described above.
Relevant privacy policies:
We do not sell your personal data. We share information only as follows:
Agent07 connects to external services using OAuth 2.0 authorisation. By completing the OAuth flow, you grant Agent07 specific permissions. Below is a summary of permissions requested and why:
You can review and revoke these permissions at any time via your Google Account settings (myaccount.google.com) or Microsoft Account settings, or by disconnecting integrations within Agent07.
We retain your data for as long as your account is active and as necessary to provide the Service. Specific retention periods:
You may request deletion of your data at any time by contacting privacy@agent07.com. Following a verified deletion request, we will delete or anonymise your data within 30 days, except where retention is required by law or to resolve disputes.
Given that Agent07 processes sensitive business communications, we implement commercially reasonable security measures including:
No system is completely secure. If you suspect unauthorised access to your account, please notify us immediately at privacy@agent07.com.
In the event of a data breach affecting your personal data, we will notify affected users and relevant supervisory authorities within 72 hours of becoming aware of the breach, as required by applicable law (including UK GDPR).
Depending on your location, you may have the following rights regarding your personal data:
To exercise any right, contact us at privacy@agent07.com. We will respond within 30 days and may need to verify your identity.
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has not been handled in accordance with applicable law.
Residents of certain US states (including California, Virginia, Colorado, Connecticut, and others) may have additional rights under applicable state privacy laws, including:
To exercise these rights, contact us at privacy@agent07.com. We will verify your identity before processing your request. You may designate an authorised agent to make a request on your behalf.
The emails and calendar events you connect to Agent07 contain personal data about third parties — your prospects, clients, colleagues, and other contacts. Agent07 processes this data to provide the Service (e.g. identifying contacts, building deal records, preparing meeting briefs).
As the user connecting these accounts, you are responsible for ensuring that your use of the Service in relation to third-party personal data complies with applicable privacy laws. Depending on your jurisdiction, this may include obligations to inform contacts that their data is being processed by an AI-powered tool, or to have an appropriate legal basis for such processing. Agent07 does not use third-party contact data for any purpose beyond providing the Service to you.
Agent07 is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us at privacy@agent07.com and we will promptly delete it.
Agent07 stores and processes data in the United States and in other countries where our service providers operate. If you are located in the UK or another jurisdiction, your data may be transferred to and processed in countries that do not provide the same level of data protection as your home jurisdiction. For UK users, where we transfer personal data outside the UK we do so using appropriate safeguards, such as the UK International Data Transfer Agreement (IDTA) or equivalent standard contractual mechanisms.
We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date. If changes are material — particularly changes affecting how we access or use your email, calendar, CRM, or file data — we will notify you by email at least 14 days before they take effect. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.
For privacy-related questions, requests, or concerns, please contact us at:
Email: privacy@agent07.com
Subject line: Privacy Inquiry
We aim to respond to all privacy enquiries within 5 business days.
© 2026 Agent07. All rights reserved.