Privacy Policy
Agentized is operated by TS Agency LLC. This policy explains how clinic and patient personal data is collected, processed, stored, and protected. The policy is aligned with EU GDPR, Turkey's KVKK (Law No. 6698), and Meta Platform Policies.
Controller
TS Agency LLC acts as controller. Clinics processing patient data via the Service act as joint controllers; TS Agency LLC is the data processor for that flow. Contact: sabalioglu@gmail.com. Domains: voice.agentized.io, agentized.io.
Data we process
Names, phone numbers, email addresses, consent flags, photos uploaded for AI pre-analysis (auto-purged after 30 days), appointment details, conversation transcripts across WhatsApp / Instagram / Facebook / Email / Webchat / voice, and clinical tags entered by clinic staff.
Lawful basis (GDPR Art. 6 and 9)
Contract performance (Art. 6(1)(b)), legitimate interests (Art. 6(1)(f)), explicit consent for special-category health data (Art. 9(2)(a)) and marketing communications (Art. 6(1)(a)).
Sub-processors
Anthropic, OpenAI, VAPI, Resend, Neon, Vercel, Cloudflare R2, Telnyx, Meta, Firecrawl, Hostinger. Data is stored preferentially in the EU.
Retention
Photos 30 days, conversations 12 months active plus 24 months archive, backups 90 days, tax records 5 years.
Your rights (GDPR Art. 15-22)
Access, rectification, erasure, portability, restriction, objection, and the right to lodge a complaint with a supervisory authority. Requests: sabalioglu@gmail.com or the Data Deletion page. We respond within 30 days.
Google user data & Limited Use
When a business connects its Google Calendar, Agentized requests the https://www.googleapis.com/auth/calendar.eventsscope for the sole purpose of creating, updating, and cancelling appointment events on that business's calendar when its AI receptionist books, reschedules, or cancels a call. We access only the event data we create or manage on the business's behalf; we do not read unrelated calendar content for any other purpose.
Agentized's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, do not use it for advertising, and do not transfer it except as needed to provide the calendar-sync feature. A business can disconnect at any time from its Settings page, which revokes our access and stops any further calendar writes.