Politika tal-Privatezza

This notice covers the early-access phase of agentos.mt. It will be reviewed by counsel and updated, with notice to registered users, before paid plans or customer-facing channels open.

agentos.mt is operated by Aftermath Ltd, a company registered in Malta (C110654, VAT MT31570511), 34 Mosta Road, St Paul’s Bay, Malta (“we”).

Two kinds of data

• Your account and workspace administration — for this, we are the controller.
• Content you put into a workspace — agent instructions, knowledge, and conversations with your agents. For this content the business that owns the workspace decides what goes in and why, and we process it on its behalf to provide the service. A data processing agreement will be offered to business customers before customer-facing channels open.

What we collect and why

• Account data — name, email address, password (stored only as a one-way hash), language and two-step sign-in settings. Used to provide and secure your account (contract; legitimate interest in security).
• Workspace data — workspace name, members and their roles, invitations (we store a hash of the invited email address and a short hint, not the full address).
• Agent content — instructions, settings, versions and knowledge sources you add. Used to run your agents and, on the free plan, to train Aftaris AI (see below).
• Test conversations — the messages you exchange with your agents in the test view, with the sources used, timing and token counts. Kept for 90 days, then deleted from your workspace; on the free plan, de-identified copies may be kept for training (see below).
• Usage records — counts of messages and tokens per agent and month, used to apply plan limits.
• Contact requests — the details you send through the contact form, used only to reply. Kept for up to 24 months.
• Security records — sign-in times, a salted hash of your IP address, device description and an audit trail of important actions. Kept for up to 12 months (audit entries about publishing and permissions may be kept for as long as the workspace exists).

Aftaris AI

To answer a message, agentos.mt sends the platform rules, the agent’s instructions, matching knowledge sections and the recent conversation to Aftaris AI, the AI service operated by Aftermath on rented GPU infrastructure in the European Union. We do not send your content to other AI providers.

Training Aftaris AI (free plan)

agentos.mt offers agents for free because the content in free workspaces helps us train and improve Aftaris AI. When you create a workspace on the free plan, you agree to this with a separate checkbox, and we record who agreed, when and to which version of these terms.

• What may be used: agent instructions, knowledge you add, and conversations with your agents (including test conversations).
• Never used: content and conversations of HR, legal and finance agents, on any plan, and workspaces that have switched training off.
• Personal details are removed first: before any content enters a training dataset, we remove names, email addresses, phone numbers, addresses and other information that identifies a person. Do not add sensitive personal data (health, financial or similar) to a knowledge base.
• Who uses it: only Aftermath, to train and evaluate Aftaris AI. Training data is never sold or shared with other AI companies.
• Our role: for this purpose Aftermath decides how the data is used and is the controller. The legal basis is the free-plan agreement and our legitimate interest in improving the service.
• Your customers: the default AI disclosure on every agent tells people that conversations may be used to improve the service. If you change it, keep that information.
• Keeping data out: paid plans, when they launch, will let you switch training off. Deleting content stops it being used in future training, but it cannot be removed from a model version that has already been trained.
• Retention: de-identified training datasets are kept for as long as they are needed to train and evaluate Aftaris AI, and reviewed at least once a year.

Who can see it

Members of your workspace, according to their role. Aftermath staff do not routinely access workspace content; if support needs it, we will ask you first. We do not sell personal data or use it for advertising. Data is hosted by our hosting provider on servers in the European Union, and emails are sent through our own mail system.

Your rights

You can ask for access to your personal data, correction, deletion, restriction, a portable copy, or object to certain uses. If your data is in a business’s workspace, we will pass your request to that business or help it respond. Use the contact form; we reply within one month. You can also complain to the Information and Data Protection Commissioner (idpc.org.mt).

Cookies

We use only cookies needed to run the site: a session cookie that keeps you signed in and protects forms, and a cookie that remembers your language. No analytics, advertising or tracking cookies. See the Cookie Policy.