Data Rights & Deletion Request
Last updated: October 26, 2026
1. General
1.1 Whether you use Agentbeam as an individual developer or as part of a team or enterprise organization, you have comprehensive rights over your personal information under GDPR, India's Digital Personal Data Protection Act, the CCPA/CPRA, and other applicable privacy laws.
1.2 AISOLO Technologies Private Limited [CIN: U62099MH2023PTC403351] is committed to respecting your privacy rights across every Platform component: website, local runtime recorder, browser extension, command-line tools, and cloud dashboard.
1.3 Most Agentbeam data is local by default and never reaches us — see Section 4 for what that means for your rights over it.
1.4 Who answers your request. For account, billing, website and support data we are the controller and will act on your request. For Workspace Data about you (activity, browser activity, sessions, skills, findings) your organization decides what is collected, so it is the controller and we are its processor. If you write to us about Workspace Data we may pass your request to your organization, tell you who to contact, or act on its instruction. For visitors to an application a customer monitors with App monitoring, the customer operating that application is the controller of the IP address and request data in its findings.
1.5 Laws covered. Rights vary by place. Beyond GDPR and UK GDPR, we apply them as follows: India's Digital Personal Data Protection Act (access to a summary of your data, correction, erasure, grievance redressal and the right to nominate another person to exercise your rights if you die or cannot act); the CCPA/CPRA and similar US state laws (know, delete, correct, opt out of sale or sharing, limit use of sensitive information, and non-discrimination — we do not sell or share personal information for advertising); and other laws where they apply. We may need to verify your identity and may decline requests as law permits.
2. Right to access
2.1 You have the right to know what personal data we hold about you and how we use it.
2.2 What you can access
- Account and profile information
- Billing and subscription history
- Synced agent activity, sessions, skills, browser activity and audit entries about you that your organization has enabled cloud sync for
- Connected-device records and assistant questions tied to your account
- App monitoring findings that identify you, such as an opaque user identifier or an IP address (typically handled by the organization operating the application)
- Support and communication records
- Website and dashboard analytics, and masked session recordings, tied to your account, where applicable
2.3 How to access your data
- View account and billing details directly in your cloud dashboard settings
- Request a full data export at [email protected]
- Access requests are processed within one month, typically within 5 business days
3. Right to rectification
3.1 You may correct inaccurate or incomplete personal data at any time.
- Update account and billing details directly in dashboard settings
- Request correction of any other data at [email protected]
- Corrections are reflected across the website and cloud dashboard promptly, typically within 72 hours
4. Right to erasure (data deletion)
4.1 You have the right to request deletion of your personal data from our Platform.
4.2 Data that's already fully in your control
Agent activity recorded locally by the runtime recorder and browser extension lives only on your own device. You can delete it immediately and completely using the Platform's local tooling — no request to us is needed, because we never had a copy.
4.3 What we delete on request
- Account details: name, email, authentication data
- Billing records: subject to legal retention requirements (see table below)
- Synced agent activity: data your organization sent to the cloud dashboard, including sessions, skills, browser activity and your device records, where your organization is not obliged to keep it (for audit entries and company records it may be)
- Assistant questions and team-library content attributed to you
- Support communications: tickets, attachments, and correspondence
- Website analytics: identifiers tied to your account in Google Analytics and PostHog, including session recordings
4.4 Third-party data
Payment data held by our payment processor follows its own legally required retention schedule and cannot be deleted on our side alone. All other third-party sub-processor data is deleted as part of your request, per our GDPR Compliance sub-processor commitments.
4.5 How to request data deletion
- Email: [email protected]
- Subject: “Data Deletion Request — [Your Account Email]”
- Include your account email and, optionally, the reason for deletion
4.6 Deletion timeline
- Account deactivation: immediate upon request
- Cloud-side data deletion: within 14 working days
- Backup purge: within 45 days of the original deletion
- Third-party sub-processor data removal: within 14 working days where possible
5. Right to data portability
5.1 You have the right to receive your personal data in a structured, commonly used, machine-readable format.
5.2 How to request data export
- Email: [email protected]
- Subject: “Data Export Request — [Your Account Email]”
- Include your account email and the data categories you wish to export
5.3 Export timeline
Export requests are processed within 30 days, depending on the volume of data requested.
5.4 Export formats
- JSON, for machine-readable data
- CSV, for spreadsheet applications
6. Right to restrict processing
You may ask us to temporarily restrict our processing of your data — for example, while you dispute its accuracy or an objection is being reviewed — by writing to [email protected]. We will notify you before lifting a restriction.
7. Right to object
You may object at any time to processing based on our legitimate interest, including for security monitoring or product analytics, and to any marketing communications.
- Marketing: unsubscribe via the link in any marketing email, or update preferences in account settings
- Website analytics: adjust cookie preferences in your browser, or contact us to opt your account out
- Other processing: write to [email protected]
8. Right to non-discrimination
We will not deny you the Service, charge you a different price, or provide a different level of quality because you exercised any right described on this page.
9. Data categories we collect
| Data category | Examples | Retention period |
|---|---|---|
| Account information | Name, email, authentication identifier, organization name, role, onboarding answers | 45 days after account deletion |
| Workspace and membership | Members, roles, invitations, settings, security contact | Life of the workspace; 45 days after deletion |
| Billing information | Legal entity, billing address, tax ID, plan tier, invoice history | 7 years (legal requirement) |
| Connected devices | Hostname, operating system, public key, CLI version, owner, last seen | Until the device is removed or the account is deleted, then 45 days |
| Synced agent activity and sessions | Rule matches, event metadata, commands and file paths, prompts where captured, model and token usage | 45 days after account deletion, or per your organization's retention setting |
| Skills, scans and team library | Skill names, hashes, risk scores, shared files and versions | Until removed, or 45 days after account deletion |
| Browser extension activity | Site, action type, outcome, finding counts; redacted text only if enabled | 45 days after account deletion, or per your organization's retention setting |
| App monitoring data | Findings, redacted excerpts, visitor IP and request details, dependency names and versions | 45 days after account deletion, or per your organization's retention setting |
| Alert delivery log | Which alert went to which destination and the result | 14 days |
| Audit log | Administrative actions and actors | Life of the workspace; 45 days after deletion |
| Assistant questions | Scrubbed, truncated questions with workspace and page | As long as needed to improve documentation, then deleted or aggregated |
| Website and dashboard analytics | Page views, referrer, approximate location, device type, product events, masked session recordings | 26 months (Google Analytics), 12 months (PostHog) |
| Support and sales communications | Tickets, demo and waitlist requests, attachments, correspondence | 3 years after resolution |
| Newsletter and marketing | Email, subscription status and preferences | Until you unsubscribe, then a suppression record |
10. Contact information
10.1 For all data rights requests and questions:
- Email: [email protected]
- General support: [email protected]
- Data deletion: processed within 14 working days
- Data export: processed within 30 days
- Company: AISOLO Technologies Private Limited, CIN: U62099MH2023PTC403351
- Registered office: 1003, Kamdhenu Commerz, Sector 14, Kharghar 410210, Navi Mumbai, Maharashtra, India
12. Exercise your data rights
12.1 To exercise any of your data rights, email us with the following:
- Email: [email protected]
- Subject: “Data Rights Request — [Type of Request]”
- Include your account email and specific request details
- Data deletion: processed within 14 working days
- Data export: processed within 30 days