Privacy Policy

Scale your business with AI-powered systems.

Book a demo

Scale your business today.

Book a demo

Legal

Last Updated: December 04, 2025

This Privacy Statement explains how Personal Information about our (potential) customers and other individuals using our services is collected, used, and disclosed by AgencyFlux ("us", "we", "our" or "AgencyFlux"). This Privacy Statement describes our privacy practices in relation to the use of our website (https://agencyflux.co), our automation systems, AI agents, web development services, and related applications and programs offered by us (the "Services"), as well as your choices regarding use, access, storage, and correction of Personal Information.

By signing up to our Services, engaging with our agency, or by agreeing to our Terms required to use certain of our Services, you agree to the collection, usage, storage, and disclosure of information described in this Privacy Statement. We may change this Privacy Statement from time to time. If we make changes, we will notify you by revising the date at the top of the statement and, where appropriate, providing you with additional notification (such as sending you an email). We encourage you to review the Privacy Statement whenever you use our Services to stay informed about our information practices.

Personal information collection

We only use your personal information to provide you with our Services or to communicate with you about your projects and systems. With respect to any documents or information you may choose to upload to our systems or share during onboarding, we take the privacy and confidentiality of such documents seriously. We employ industry-standard techniques to protect against unauthorized access to data about you that we store, including personal information.

We do not share personal information you have provided to us without your consent, unless:

- Doing so is appropriate to carry out your own request;

- We believe it is needed to enforce our Terms of Service, or that it is legally required;

- We believe it is needed to detect, prevent, or address fraud, security, or technical issues;

- Otherwise protect our property, legal rights, or that of others.

As part of our normal business operations, your usage of our Services, our administration of you as a customer, and to comply with local laws and regulations (including UK and EU GDPR), we collect your Personal Information. We will not process Personal Information for other purposes than described in this Privacy Statement.

Personal information you provide to us

While using our Services, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. For example, we collect information when you book a demo, sign a contract, request support, or otherwise communicate with us. The types of information we may collect include basic user information (such as your name, email address, company name, telephone number, and job title), and any other information you choose to provide.

We will not collect financial information from you directly (such as your payment card number, expiration date, or security code). All payments to us are handled via a third party, Stripe. We refer to their Privacy Statement at https://stripe.com/privacy.

Personal information we collect automatically

When you access or use our Services (including our website and client portals), we automatically collect information about you, including:

- Log Information: We collect information about your use of the Services, including the type and version of browser, machine and device you use, access times, pages viewed, your IP address, and the page you visited before navigating to our Services.

- Cookies: We use various technologies to collect information, which may include sending cookies to your computer or mobile device. Cookies are small data files stored on your hard drive or in device memory that help us to improve our Services and your experience. You can instruct your browser to refuse all cookies.

- Third Parties: We may use third-party services such as Google Analytics or custom tracking via our automation stack (n8n) to better decipher and analyze usage data.

Third Parties & Integrations

We may also obtain Personal Information about you from third parties, such as LinkedIn, Apollo, and other publicly accessible sources for B2B outreach purposes. Additionally, our Services rely on third-party infrastructure to function. Data typically flows through these providers:

- Framer: Website hosting and forms.

- n8n / Make: Automation workflows.

- Vapi / Retell AI / ElevenLabs: Voice agent processing.

- OpenAI: AI text processing.

- Namecheap Private Email: Email communications.

Personal information we use

For individuals in the United Kingdom (UK) and European Economic Area (EEA), our processing (i.e., use) of your Personal Information is justified on the following legal bases:

- The processing is necessary to perform an agreement with you or take steps to enter into an agreement at your request (e.g., building your requested automation system);

- The processing is necessary for us to comply with relevant legal obligations;

- The processing is in our legitimate interest, and this justified interest prevails over your privacy; and/or you have consented to the processing.

We collect your Personal Information to:

- Perform our agreement with you and with others;

- Process, evaluate, and complete certain transactions involving the Services;

- Operate, evaluate, maintain, improve, customize, and develop the Services;

- Provide you with documentation, communications, or any other services you request;

- Correspond with you to resolve queries or complaints (via support@agencyflux.co);

- Manage, protect against and investigate fraud, risk exposure, claims, and other liabilities.

Personal information we disclose

We operate internationally and we may share your Personal Information with our affiliated businesses as part of our business operations. We may also appoint third-party service providers (who will operate under our instructions) to assist us in providing information, products, or services to you.

We may share your personal data with these third parties to perform services that the third parties have been engaged by us to perform on our behalf, subject to appropriate contractual restrictions and security measures. Specifically, data may be processed by our infrastructure partners including Framer, n8n, Vapi, Retell AI, OpenAI, and Stripe.

Where Personal Information is transferred outside the United Kingdom or European Economic Area to our affiliated companies or to third-party service providers, we will take steps to ensure that your Personal Information is protected by the same level of protection as if it remained within the UK/EEA.

We may share Personal Information with third parties in connection with a potential or actual sale of our company or any of our assets. In accordance with our legal obligations, we may also process Personal Information, subject to a lawful request, to public authorities for law enforcement or national security purposes.

Security

The security of your Personal Information is important to us. We aim to safeguard and protect your Personal Information from unauthorized access, improper use or disclosure, unauthorized modification, or unlawful destruction or accidental loss. We utilize industry-standard security measures, including secured servers (Namecheap), encrypted payment processing (Stripe), and secure automation environments (n8n).

Please remember that no method of transmission over the internet, or method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.

Personal Information Breach: In the case of a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Personal Information, we shall without undue delay and, where feasible, not later than 72 hours after having become aware of it, notify the breach to the local supervisory authority (ICO in the UK), unless the breach is unlikely to result in a risk to the rights and freedoms of natural persons.

Retention of personal information

In general, the collected Personal Information is not stored by us for longer than is necessary to provide our Services, unless you make a prior deletion request. However, in some circumstances, we may retain certain Personal Information for other periods of time, for instance where we are required to do so in accordance with legal, tax, and accounting requirements (e.g., retaining invoice data for tax purposes).

Children

The Services are not for use by children under the age of 16 years and we do not knowingly collect, store, share, or use Personal Information of children under 16 years. If you are under the age of 16 years, please do not provide any Personal Information.

Your Rights (UK & EU)

Based on the UK GDPR and EU GDPR, you may have rights available to you in respect of your Personal Information, such as:

- To obtain a copy of your Personal Information together with information about how and on what basis that Personal Information is processed;

- To rectify inaccurate Personal Information (including the right to have incomplete Personal Information completed);

- To delete your Personal Information (where it is no longer necessary in relation to the purposes for which it was collected or processed);

- To restrict processing of your Personal Information under certain circumstances;

- To port your Personal Information in machine-readable format to a third party (or to you);

- To withdraw your consent to our processing of your Personal Information;

- To lodge a complaint with your local supervisory authority for data protection.

In relation to all of these rights or if you have any questions about this Privacy Statement, please send an email to support@agencyflux.co.