This Privacy Policy describes how BuildingAgentic ("we," "us," or "our") collects, uses, and shares information about you when you visit buildingagentic.ai and interact with our services.
1.1 Company Information
Company:BuildingAgentic — [LEGAL ENTITY NAME,e.g. BuildingAgentic LLC]
Address: [REGISTERED ADDRESS OR VIRTUAL OFFICEADDRESS]
Email: [privacy@buildingagentic.ai or yourprivacy contact]
Website:https://buildingagentic.ai
1.2 Data We Collect
1.2.1 Information You Provide Directly
• Contact information: name,email address, company name, phone number (when you submit a contact or auditrequest form)
• Project details:descriptions of your business needs, operational context, and technical stack(when you book a discovery call or submit a brief)
• Communications: emails,messages, and any other content you send us
1.2.2 Information Collected Automatically
• Usage data: pages visited,time spent, clicks, scroll depth, referrer URL
• Device and browserinformation: browser type and version, operating system, screen resolution,device type
• IP address: collected byboth Google Analytics and Yandex Metrika; used to determine approximategeographic location
• Session recordings (YandexMetrika webvisor): if you consent, we record mouse movements, clicks, andscroll behavior to improve our website. This applies to EU visitors only uponexplicit consent.
• Cookies and similartechnologies: see Cookie Policy (Section 3) for full details
1.3 Legal Basis for Processing (GDPR)
Ifyou are located in the European Economic Area (EEA) or United Kingdom, weprocess your personal data on the following legal bases:
Right
What it means
Consent (Art. 6(1)(a))
Analytics cookies (Google Analytics, Yandex Metrika). You may withdraw consent at any time via the cookie settings banner.
Legitimate Interests (Art. 6(1)(f))
Improving our website, fraud prevention, security, and internal analytics (where consent is not required). We balance our interests against your rights.
Contract (Art. 6(1)(b))
Processing necessary to respond to your inquiry ordeliver services you have requested.
Legal Obligation (Art. 6(1)(c))
Compliance with applicable laws, court orders, andregulatory requirements.
1.4 How We Use Your Data
• To respond to yourinquiries and discovery call requests
• To provide and improve ourAI development services
• To send transactionalcommunications (project updates, proposals)
• To analyze website trafficand user behavior (with consent for analytics cookies)
• To detect and preventfraud, abuse, and security incidents
• To comply with legalobligations
Wedo [object Object] use your data for automated decision-making or profilingthat produces legal or similarly significant effects.
1.5 Third-Party Services and Data Transfers
1.5.1 Google Analytics 4 (GA4)
• Provider: Google LLC, 1600Amphitheatre Parkway, Mountain View, CA 94043, USA
• Tracking ID: G-QQV92ZWRJE
• Purpose: Website trafficanalysis, user behavior, conversion tracking
• Data transfer: Googletransfers data to the USA under Standard Contractual Clauses (SCCs) and EU-USData Privacy Framework
• Privacy Policy:https://policies.google.com/privacy
• Opt-out:https://tools.google.com/dlpage/gaoptout
1.5.2 Yandex Metrika
⚠ Data Transfer Notice — Yandex Metrika
Yandex N.V. is a Netherlands-registered company; however, data may be processed on servers located in Russia, which is not recognized as a country providing adequate data protection under EU or UK law. For EU/EEA/UK visitors, Yandex Metrika is loaded ONLY upon explicit opt-in consent. You may withdraw consent at any time through our cookie settings.
• Provider: Yandex N.V.,Schiphol Boulevard 165, 1118 BG Schiphol, Netherlands
• Counter ID: 110893299
• Purpose: Website analytics,heatmaps, session recording (webvisor), click maps, traffic source analysis
• Features enabled: webvisor(session recording), clickmap, e-commerce data layer, link tracking
• Data transfer: Data may beprocessed in Russia and other countries. No EU adequacy decision exists forRussia.
• Basis for EU processing:Explicit consent (opt-in) via cookie banner
• Privacy Policy:https://metrica.yandex.com/about/info/privacy-policy
1.5.3 Microsoft Bing Webmaster Tools
• We use a Bing siteverification meta tag (msvalidate.01). This is a non-tracking verificationmechanism and does not collect personal data or set cookies.
1.6 Data Retention
Right
What it means
Contact form submissions
Contact form submissions
Google Analytics data
14 months (GA4 default; configured in GA4 settings)
Yandex Metrika data
3 months (session recordings); up to 12 months (aggregate analytics)
Cookie consent records
1 year from consent (re-consent requested annually)
Email communications
3 years from last communication
1.7 Your Rights
1.7.1 GDPR Rights (EEA and UK Residents)
Right
What it means
Access (Art. 15)
Request a copy of the personal data we hold about you.
Rectification (Art. 16)
Request correction of inaccurate or incomplete data.
Erasure (Art. 17)
Request deletion of your personal data ("right to be forgotten").
Restriction (Art. 18)
Request that we limit processing of your data in certain circumstances.
Portability (Art. 20)
Receive your data in a machine-readable format.
Object (Art. 21)
Object to processing based on legitimate interests or for direct marketing.
Withdraw Consent
Withdraw consent for analytics cookies at any time via cookie settings.
Lodge a Complaint
File a complaint with your national data protection authority (e.g., ICO in UK, CNIL in France).
1.7.2 CCPA/CPRA Rights (California Residents)
Ifyou are a California resident, you have the following rights under theCalifornia Consumer Privacy Act (CCPA) as amended by the CPRA:
Right
What it means
Access (Art. 15)
Request a copy of the personal data we hold about you.
Object (Art. 21)Object to processing based on legitimate interests or for direct marketing.Withdraw ConsentWithdraw consent for analytics cookies at any time via cookie settings.Lodge a ComplaintFile a complaint with your national data protection authority (e.g., ICO in UK, CNIL in France).
Rectification (Art. 16)
Request correction of inaccurate or incomplete data.
Erasure (Art. 17)
Request deletion of your personal data ("right to be forgotten").
Restriction (Art. 18)
Request that we limit processing of your data in certain circumstances.
Portability (Art. 20)
Receive your data in a machine-readable format.
Object (Art. 21)
Object to processing based on legitimate interests or for direct marketing.
Withdraw Consent
Withdraw consent for analytics cookies at any time via cookie settings.
Lodge a Complaint
File a complaint with your national data protection authority (e.g., ICO in UK, CNIL in France).
1.7.3 Other US State Rights
Residentsof Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas(TDPSA), and other states with comprehensive privacy laws have rights similarto those listed above. To exercise any rights, contact us at the address inSection 1.1.
1.7.4 Exercising Your Rights
Toexercise any of the rights above, email us at [privacy@buildingagentic.ai].We will respond within 30 days (GDPR) or 45 days (CCPA). We may ask you toverify your identity before processing your request.
1.8 Data Security
Weimplement appropriate technical and organizational security measures to protectyour personal data against unauthorized access, alteration, disclosure, ordestruction. Measures include:
• HTTPS/TLS encryption forall data in transit
• Access controls andleast-privilege principles for team members
• No storage of full paymentcard data (we do not process payments directly)
• Regular review of securitypractices and vendor compliance
Nomethod of transmission over the internet is 100% secure. We cannot guaranteeabsolute security.
1.9 Children's Privacy
Ourservices are not directed to individuals under the age of 16. We do notknowingly collect personal information from children. If you believe we havecollected such information, contact us immediately and we will delete it.
1.10 Changes to This Policy
Wemay update this Privacy Policy from time to time. The "Last Updated"date at the top of this document reflects the most recent revision. We willprovide prominent notice of material changes (e.g., banner notification oremail) where required by applicable law.
