Privacy Policy
Last updated: 25 October 2026
General Agentic ("we", "us") builds and operates AI assistants for businesses. Each assistant can work with the customer's email, files and messaging. This policy explains what data we process, why, and how we protect it.
1. Who we are
Generalagentic.eu, Stockholm, Sweden.
Contact: navid@generalagentic.eu
When we run an assistant for a business customer, the customer decides what the assistant is used for. We process that business's data on its behalf as a data processor, under a data processing agreement. For our own website, sales and customer accounts, we are the data controller.
2. What data we process
| Category | Examples |
|---|---|
| Account and contact details | Names, email addresses, phone numbers and roles of the customer's users |
| Google user data (only when a user connects their Google account) | Gmail messages, threads and attachments; drafts; labels; basic profile (name, email address); contacts |
| Files | Documents in storage the customer connects, such as Dropbox |
| Messages with the assistant | Instructions and replies sent through WhatsApp or the web chat |
| Assistant memory | Facts, preferences and task status the assistant keeps so it can do its job |
| Technical data | Logs, timestamps, error reports and usage metrics |
3. How we use the data
We use data only to provide the assistant features the customer has turned on. For example:
- searching and summarising emails and documents
- drafting replies
- tracking orders, instructions and payments
- preparing scheduled briefs
- keeping the service secure and working
By default, the assistant drafts messages and waits for approval before sending anything to third parties.
We do not:
- sell personal data
- use it for advertising
- use it to train general-purpose AI models
4. Google user data
Specifically:
- Purpose. We use Google user data only to provide and improve the user-facing assistant features the user or their organisation asked for. This includes reading, searching and organising email, and creating drafts and sending messages the user has approved.
- No transfers for other purposes. We transfer Google user data to others only when needed to provide those features, to comply with law, or as part of a merger or acquisition with notice to users.
- No advertising or data brokers. We never use Google user data for advertising, and we never sell it.
- No human reading by default. Our staff do not read your Google user data unless:
- you give explicit permission for specific messages (for example, for support), or
- it's needed for security purposes, or
- it's needed to comply with law, or
- the data is aggregated and anonymised for internal operations.
- No model training. We do not use Google user data to develop, improve or train generalised AI or machine-learning models.
You can revoke access at any time at myaccount.google.com/permissions.
5. Service providers (sub-processors)
We use these providers to run the service. Each is bound by data protection terms.
| Provider | Purpose | Location |
|---|---|---|
| Composio | Secure connection to Gmail and other apps (stores access tokens) | United States |
| AI model providers (e.g. Anthropic) | Processing of text to generate assistant replies | United States |
| Meta (WhatsApp) | Messaging channel, if used | Global |
When data is transferred outside the EU/EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
6. How long we keep data
We keep data for as long as the customer's service is active. When the service ends, or when an authorised user asks, we delete it within 30 days. The exception is data we must keep by law. Disconnecting a Google account stops all further access straight away.
7. Security
We protect data with:
- encryption in transit
- access controls and least-privilege permissions
- separate environments for each customer
- tokens held by our connection provider rather than in the assistant itself
No system is perfectly secure. If a breach affects personal data, we'll notify affected customers and authorities as the law requires.
8. Your rights
Under the GDPR and similar laws, you can:
- ask for access to your personal data, or to correct, delete or export it
- object to processing or restrict it
If we process your data on behalf of a business customer, we'll pass your request to them and help them respond. Contact navid@generalagentic.eu. You can also complain to your local data protection authority, for example Integritetsskyddsmyndigheten (IMY), Sweden.
9. Changes
We'll post any changes here and update the date above. We'll give customers notice before significant changes take effect.