Privacy policy

Last updated: 15 September 2026

1. Introduction

Aigentcy is an AI automation agency based in Malta. We value your privacy and are committed to protecting your personal information. This privacy policy explains how we collect, use, share and protect information when you visit www.aigentcy.com or engage our services, in line with the EU General Data Protection Regulation (GDPR) and applicable Maltese law. Read it together with our cookie policy.

2. Information we collect

Information you give us. Your name, email address, phone number, company, the service you are interested in and anything you write in the contact form or the automation audit form.
Free tools. The EU AI Act readiness quiz collects your email address, your answers, your score and band. The AI compliance policy generator collects your email address and your questionnaire answers, such as company name, sector and role. Policy documents are assembled in your browser; the document itself is not sent to us.
Campaign details. When you arrive from one of our adverts, the audit form records the campaign tags in the link and the page you landed on.
Technical information. Your IP address and browser details, which our hosting provider processes to deliver and secure the site. We use your IP address to limit repeated form submissions.
Cookies and similar technologies. With your consent, the Meta Pixel. See section 6 and the cookie policy.

3. How we use your information

To reply to your enquiry, arrange a call and provide the services you ask for.
To show your quiz result or prepare your policy document.
To protect the site and its forms from spam and abuse.
With your consent, to measure visits and enquiries from our adverts.
To meet our legal obligations.

Submitting a form does not sign you up to any mailing list.

4. Legal basis for processing

Legitimate interests. Replying to an enquiry you sent us, and keeping the site and its forms secure.
Contractual necessity. Where processing is needed to provide services you have asked for.
Consent. For the Meta Pixel. You can withdraw consent at any time from Cookie settings at the bottom of any page.
Legal obligation. Where the law requires us to process or keep information.

5. Who processes your information

We do not sell or rent your personal information. We use these service providers, who process information on our behalf and only for the purposes above:

Cloudflare, Inc. Hosts the site, runs the form handling, stores form submissions and provides Turnstile, the check that a form is sent by a person.
Plunk. Delivers the notification email that tells our team about your enquiry.
Microsoft. Hosts our business email, where those notifications and our replies are kept.
Meta Platforms Ireland Limited. Provides the Meta Pixel, only after you accept marketing cookies.

Some of these providers may process information outside the European Economic Area. Where they do, they rely on safeguards recognised under the GDPR, such as the European Commission's standard contractual clauses. We may also disclose information where the law or a valid request from a competent authority requires it.

6. Analytics and advertising

The site does not use Google Analytics. With your consent, it loads the Meta Pixel to measure visits and enquiries from our adverts. It sends a page view for each page and a lead event, which names the form, when you send one. Nothing loads until you accept marketing cookies. The cookie policy lists what is stored, for how long, and what happens when you withdraw.

Following an external link opens the destination service, whose own privacy policy applies. The assistant links include a generic prompt and the public site address, not your form entries.

7. Data retention

Form submissions are deleted from the website's database seven days after they arrive; an hourly job removes them. The one exception is a CV you choose to share with recruitment partners, which is kept for 12 months (see below). The notification email in our business inbox is kept for as long as we need it to respond to you, follow up on your enquiry, meet our legal obligations and resolve disputes. Our hosting provider keeps its own operational logs to run and secure its network.

CV checker and AI exposure checker

Both tools read your CV in your browser. Nothing is sent to us until you fill in the short form, apart from a CV line you ask us to rewrite. That line is processed by our AI provider, Cloudflare Workers AI, to write the suggestion and is not kept.

When you fill in the form we store your first name, email, the option you chose under "I am", your job title and country, any years of experience or LinkedIn link you add, and your result: the score, the matched occupation and, for the CV checker, the job you're applying for. We use them to send your report and to follow up, and they are deleted after seven days like every other form.

For the CV checker we also keep a saved report for 90 days, so you can open your result again and check an updated CV against the same job. It holds your scores, the fixes, the job title, the job advert you pasted and the website it came from. It never holds your CV, unless you tick the sharing box below. The link to the report is private, so anyone who has it can read the report. After 90 days the report is deleted.

If you tick the box to share your CV with recruitment partners, we also store the text of your CV with the occupation, seniority and country we found in it, so recruitment partners who hire for roles like yours can contact you. We share it only with those partners and only for that purpose, keep it for 12 months, and then delete it.

To have your CV or any of these details deleted sooner, email info@aigentcy.com from the address you used. We act on it within one month.

8. Your data protection rights

Under the GDPR, you have the right to:

access the personal information we hold about you;
ask us to correct inaccurate or incomplete information;
ask us to erase your personal information;
restrict or object to our processing of your information;
ask for your information in a portable format; and
withdraw your consent at any time, where processing is based on consent.

To exercise any of these rights, email info@aigentcy.com. If you have the reference shown after you sent a form, include it, but do not send sensitive information. You also have the right to lodge a complaint with the Information and Data Protection Commissioner (IDPC) in Malta.

9. Data security

We use appropriate technical and organisational measures to protect your information against unauthorised access, loss or misuse, including encrypted connections, bot checks and limits on repeated submissions. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

10. Changes to this policy

We may update this privacy policy from time to time. Changes are posted on this page with a new "Last updated" date, and significant changes are communicated where appropriate.

11. Contact us

For questions about this privacy policy or your information, email info@aigentcy.com.