Legal
Privacy policy
What personal data we process when you visit AgifyMD, write to us, become a customer, or receive our emails, and how to exercise your rights. This policy covers both the Agify and AgifyMD websites, which are published by the same company.
Last updated
1.Who is responsible for your data
The data controller is the company that publishes the Agify and AgifyMD websites:
- Company name
- AGIFY
- Registered office
- 38 ter avenue de Lattre de Tassigny, 13127 Vitrolles, France
- SIREN
- 988 848 875
- Personal data
- malik@agify.fr
AGIFY has not appointed a data protection officer. If you have any questions about your data, write to the address above.
Pending approval before publication
To be reviewed by a lawyer: does AGIFY need to appoint a data protection officer (Article 37 of the GDPR), given the large-scale monitoring of professionals performed by Radar and Outbound?
2.Who this policy covers
This policy covers:
- visitors to the Agify and AgifyMD websites;
- people who write to us, book a call, or request a sample;
- subscribers to our newsletter;
- professionals we contact to introduce our services;
- our customers, their contacts, and the users of our software;
- professionals whose business information our software gathers (see the “Business information processed by our software” section);
- people who apply for our job openings.
Data our customers upload to our software for their own purposes is processed on their behalf and according to their instructions. In that case, each customer is responsible for informing the people concerned.
Pending approval before publication
To be reviewed by a lawyer: no data processing agreement (Article 28 of the GDPR) exists with our customers yet; one must be drafted before we can refer to it (ACQ-833).
3.What we collect, why, and for how long
| Purpose | Data | Legal basis | Retention period |
|---|---|---|---|
| Running and securing the site | IP address, date and time, page requested, browser type (server logs) | Legitimate interest: keeping the site secure and running properly | Up to 12 months |
| Remembering your cookie choices | Your choices and when you made them | Legitimate interest: honoring your choices (a tracker exempt from consent) | 6 months |
| Knowing where requests come from | Referring site, campaign parameters, landing page, and date of the visit; first known source | Consent | In your browser: until the tab is closed (visit source), up to 13 months (first source). Once attached to a request: kept with that request |
| Answering your requests and scheduling calls | Last name, first name, work email, company, job title, message, chosen time slot, how you heard about us, the page and button the request came from; referring site, campaign parameters, and landing page of the page you were on (and, with your consent, of your visit) | Steps taken at your request before entering into a contract; legitimate interest in answering the requests we receive | 3 years after our last exchange |
| Introducing our services to professionals (business outreach) | Name, job title, company, work contact details, history of our exchanges | Legitimate interest: introducing our services to the professionals they are relevant to | 3 years after our last exchange, or until you object |
| Sending our newsletter | Email address, first name if provided, sign-up and confirmation dates | Consent | Until you unsubscribe |
| Managing customer relationships: contracts, software access, support | Names and work contact details of contacts and users, correspondence, contract documents | Performance of a contract | Term of the contract, then 5 years (statute of limitations) |
| Invoicing and bookkeeping | Name, billing details, orders, invoices, payments | Legal obligation | 10 years from the end of the fiscal year |
| Recruiting | Résumé, cover letter, contact details, correspondence, and interview notes | Pre-contractual steps; legitimate interest | Length of the hiring process, then 2 years after the last contact if you agree |
Required form fields are marked: without them, we cannot process your request. We never make decisions that have legal effects on you based solely on automated processing.
Pending approval before publication
To be reviewed by a lawyer: legal bases and retention periods (taken from the current site and from the reference frameworks of the CNIL, France’s data protection authority). To be checked: how long server logs are actually kept, and which tool will send the newsletter (not chosen yet, ACQ-826).
4.Where the data comes from
We obtain the data we process:
- from you, when you write to us, book a call, sign up, or sign a contract;
- from your employer, when it names its contacts or the users of our software;
- from public business sources (company websites, directories, official publications, professional networks) and from business data providers;
- from the site itself, for technical logs and, with your consent, where your visit came from.
If we contact you without your having given us your contact details, our first message tells you where we got them and how to refuse any further contact.
Pending approval before publication
Commitment to be checked against our outreach email templates (informing individuals, Article 14 of the GDPR).
5.Business information processed by our software
Our software helps our customers spot organizations that are preparing a purchase and the decision-makers within them. To do this, we gather and update information about organizations and professionals: name, job title, employer, work contact details, and public signals with their date and source, such as a tender, a job opening, an appointment, or a publication.
This information is strictly professional: we include no health data and no data about patients.
If this applies to you, you can at any time find out what information we hold about you, have it corrected, or object to its processing by writing to the address given in the “Your rights” section. If you object, we remove your information from what we provide to our customers.
Pending approval before publication
To be reviewed by a lawyer: AGIFY’s role (controller for its own business information database, processor for data uploaded by customers), the legal basis (legitimate interest), how individuals are informed (Article 14 of the GDPR), whether a data protection impact assessment is required, the removal commitment above, and the absence of health data in Radar’s sources and filters.
6.Who can access your data
Only the AGIFY staff who need your data for their work can access it. We also rely on service providers who process it on our behalf and according to our instructions:
| Provider | Role | Where data is processed |
|---|---|---|
| Hetzner Online GmbH | Hosting for the site and our servers | Germany |
| Cal.com | Call scheduling | Possibly the United States |
| Attio | Tracking our contacts and sales conversations | To be confirmed |
The subprocessors used by our software (hosting, AI models, data enrichment, email delivery, automated jobs) are listed on the Security and data page.
We do not sell your data or share it with any third party for advertising purposes. We only disclose it to an authority when the law requires us to.
Pending approval before publication
To be confirmed: the full list of providers (email, newsletter delivery, data and AI model providers used by our software), where each one is hosted, and whether the contracts required by Article 28 of the GDPR have been signed. PostHog’s region to be checked when it is connected (ACQ-828).
7.Transfers outside the European Union
Our servers are located in the European Union. Some providers may process data outside the EU, including in the United States: Cal.com for call scheduling, and the AI model providers our software uses (OpenRouter, OpenAI). In that case, those transfers rely on a European Commission adequacy decision, such as the EU-U.S. Data Privacy Framework for certified companies, or on the standard contractual clauses adopted by the Commission.
Pending approval before publication
To be reviewed by a lawyer: the safeguard that actually applies to each provider (EU-U.S. Data Privacy Framework certification or standard contractual clauses).
8.Security
We protect your data with measures suited to the risks: encrypted connections (HTTPS), access limited to authorized staff, and servers hosted in the European Union. The measures specific to our software are described on the Security and data page.
Pending approval before publication
To be checked: each measure listed, for consistency with the Security and data page (ACQ-833).
9.Your rights
You have the following rights over your data:
- access: find out whether we process data about you and obtain a copy;
- rectification: have inaccurate or incomplete data corrected;
- erasure: have your data deleted, where the law provides for it;
- restriction: have the use of your data temporarily suspended;
- objection: object at any time to business outreach and, on grounds relating to your situation, to other processing based on our legitimate interest;
- portability: receive the data you gave us in a machine-readable format, when processing is based on your consent or on a contract;
- withdrawal of consent: at any time, without affecting what was done before;
- instructions for after your death: specify what should happen to your data after you die.
To exercise your rights, write to us:
- Personal data
- malik@agify.fr
We will reply within one month. This may be extended by two months for a complex request, in which case we will let you know. If we have reasonable doubts about your identity, we may ask you to confirm it. To stop receiving our emails, just tell us, for example by replying to one of them.
If, after contacting us, you believe your rights have not been respected, you can file a complaint with the CNIL:
- Supervisory authority
- Commission nationale de l’informatique et des libertés (CNIL), France’s data protection authority (opens in a new tab)
- Postal address
- CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
10.Cookies
The cookies and other trackers we use, and how to manage your choices, are described on our Cookies page.
11.Changes to this policy
We update this policy whenever our processing or our providers change. The date of the latest update is shown at the top of the page. The French version is the authoritative one; the English version is provided for information purposes.