Privacy Policy
Your privacy matters to us. This policy explains how Humanizing Agents collects, uses, and protects your personal information.
Last updated: January 20, 2025
1. Introduction
Welcome to Humanizing Agents. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our platform, or interact with our AI-powered chat agents.
By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please do not use our services.
Data Controller: Humanizing Technologies GmbH, In der Trift 1, 57462 Olpe, Germany is the data controller responsible for your personal data (Art. 4(7) GDPR). Our Data Protection Officer is DataCo GmbH, Dachauer Straße 65, 80335 München, Germany (www.dataguard.de).
2. Information We Collect
We collect information that you provide directly to us and information collected automatically. No automated decision-making under Articles 22(1) and (4) GDPR occurs.
Information You Provide
- Account Information: Name, email address, password, and organization details when you create an account
- Billing Information: Payment card details, billing address, and transaction history (processed securely through our payment providers)
- Profile Information: Profile picture, company name, website URL, and other optional profile details
- Agent Configuration: Custom settings, knowledge base content, branding information, and avatar preferences you configure for your AI agents
- Communications: Information in emails, support tickets, or feedback you send to us
Automatically Collected Information
- Device Information: Browser type, operating system, device identifiers, and IP address
- Usage Data: Pages visited, features used, time spent on pages, click patterns, and navigation paths
- Conversation Analytics: Aggregated statistics about AI agent conversations, response times, and satisfaction metrics
- Cookies and Similar Technologies: Information collected through cookies, web beacons, and similar technologies (see our (Cookie Policy)
Information from Third Parties
- Single Sign-On: Information from identity providers when you use SSO
- Integrations: Data from connected services you authorize
- Business Partners: Information from partners for fraud prevention and account verification
3. How We Use Your Information
We use the information we collect to provide, maintain, and improve our services. Specifically, we use your information for:
Service Delivery
- Creating and managing your account
- Processing payments and managing subscriptions
- Powering AI agent conversations and responses
- Providing customer support and responding to inquiries
- Sending service-related notifications and updates
Improvement and Development
- Analyzing usage patterns to improve our platform
- Developing new features and services
- Conducting research and analytics
- Testing and quality assurance
Legal Basis (GDPR)
- Art. 6(1)(a) GDPR — Processing based on your consent
- Art. 6(1)(b) GDPR — Processing necessary for contract performance
- Art. 6(1)(f) GDPR — Processing based on our legitimate interests
- § 25 TTDSG — For technically necessary cookies and device access
Important: We do NOT use your conversation data or customer content to train our AI models. Your data remains your own and is used solely to power your specific AI agents. Platform users act as data controllers for end-customer data processing.
4. Information Sharing
We do not sell your personal information. We may share your information in the following circumstances:
Service Providers
We share information with third-party processors who help us operate our platform, including:
- Hosting providers (All-Inkl, Microsoft Azure)
- Analytics providers (Google Analytics, HubSpot)
- CRM platform (Pipedrive)
- Content delivery (Microsoft Azure CDN)
- Monitoring (Microsoft Azure Monitor)
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and your choices regarding your information.
Legal Requirements
We may disclose your information if required by law or if we believe such action is necessary to:
- Comply with legal processes or government requests
- Protect our rights, privacy, safety, or property
- Prevent fraud or address security issues
- Protect users and the public
With Your Consent
We may share your information with other parties when you give us explicit consent to do so.
5. Data Security
We implement industry-standard security measures to protect your information from unauthorized access, alteration, disclosure, or destruction.
Security Measures
- Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
- Access Controls: Role-based access with multi-factor authentication
- Monitoring: 24/7 security monitoring and intrusion detection
- Audits: Regular third-party security audits and penetration testing
- Compliance: Fully GDPR compliant, data hosted on secure servers in Germany
While we strive to protect your information, no method of transmission or storage is 100% secure. We encourage you to use strong passwords and keep your login credentials confidential. For more information about our security practices, visit our
6. Your Rights
Depending on your location, you may have certain rights regarding your personal information. These rights may include:
Right to Access
Request a copy of the personal data we hold about you
Right to Rectification
Request correction of inaccurate or incomplete data
Right to Erasure
Request deletion of your personal data ("right to be forgotten")
Right to Portability
Receive your data in a structured, machine-readable format
Right to Object
Object to processing of your data for certain purposes
Right to Restriction
Request limitation of processing in certain circumstances
To exercise any of these rights, please contact us at contact@humanizing.com. We will respond to your request within 30 days in accordance with GDPR requirements.
Supervisory Authority: You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular in the EU/EEA Member State of your habitual residence, place of work, or place of the alleged infringement.
7. International Transfers
Our primary data processing takes place on servers located in Germany. Where data is transferred to processors outside the EU/EEA, we ensure appropriate safeguards are in place in accordance with GDPR requirements.
Safeguards for Third-Country Transfers
For transfers of personal data to countries outside the EU/EEA, we rely on:
- Standard Contractual Clauses (SCCs) per Art. 46(2)(c) GDPR
- EU Commission adequacy decisions where available
- Additional technical and organizational measures as required
Data Residency
Our platform data is hosted on secure servers in Germany. Certain third-party services (such as Google Analytics, HubSpot, Pipedrive) may process data in the United States under Standard Contractual Clauses.
8. Data Retention
We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.
Retention Periods
- Account Data: Retained for the duration of your account; deleted when the registration purpose lapses (cancellation/modification)
- Log Files: Deleted after a maximum of seven days; IP addresses are anonymized thereafter
- Billing Records: Retained as required by German tax and commercial law (typically up to 10 years)
- Email Communications: Deleted when the conversation matter is conclusively resolved
- Cookie Data: Session cookies deleted on logout; persistent cookies as specified in our Cookie Policy
When your data is no longer needed, we securely delete or anonymize it in accordance with our data destruction procedures.
9. Children's Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at contact@humanizing.com.
If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information from our systems promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:
- Posting the updated policy on this page with a new effective date
- Sending you an email notification (for significant changes)
- Displaying a prominent notice in our application
We encourage you to review this policy periodically. Your continued use of our services after any changes indicates your acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy, our data practices, or would like to exercise your data subject rights, please contact us:
Data Controller
Email: contact@humanizing.com
Address: Humanizing Technologies GmbH
In der Trift 1
57462 Olpe
Germany
Data Protection Officer
DataCo GmbH
Dachauer Straße 65, 80335 München, Germany
+49 89 7400 45840
www.dataguard.de
For EU/EEA users, you also have the right to lodge a complaint with your local data protection authority (Art. 77 GDPR) if you believe we have not addressed your concerns adequately.
For security-related inquiries, please contact contact@humanizing.com.
Thank you for trusting Humanizing Agents with your data. We are committed to being transparent about our data practices and protecting your privacy. If you have any questions, please don't hesitate to contact us.