Data Protection Notice

Data controller

Controller: ElliSekiz LLC, 30 N Gould St Ste R, Sheridan, WY 82801, USA, Wyoming registration no. 2026-001994433.

For businesses that sign up to Agenola we are the controller. For visitors who talk to a business's avatar THAT BUSINESS is the controller; we act as processor on its instruction.

Data processed

Identity and contact: name, email.

Transaction security: password hash, session records, IP address.

Cookie preference record: whether you allowed measurement cookies, its date, a shortened IP address and browser details (to prove explicit consent).

Customer transaction: subscription status, usage counters, billing records.

Records of building agents with AI: the requests you write to the AI and your answers, the files and sources you attach, the agent that was built, and usage and cost details.

Visitor data (as processor): answers to the agent's questions, conversation transcript, IP and country, uploaded files and the details read from them where applicable, test results, and, on WooCommerce stores, the id, number and amount of orders placed after a conversation with the agent.

Purposes

Providing and maintaining the service, managing the account, operating the subscription and quota, billing, security, troubleshooting, providing the feature that builds agents with AI, monitoring its cost and improving it, and meeting legal obligations.

Legal basis

Formation and performance of a contract (KVKK art. 5/2-c): account, subscription and running the service.

Legal obligation (art. 5/2-ç): invoices and accounting records.

Legitimate interest (art. 5/2-f): security, preventing abuse, measuring service quality.

Explicit consent: only for non-essential cookies and analytics tools.

Transfers abroad

Some suppliers we use to provide the service are located abroad — the language model provider, the text search service (Microsoft Azure OpenAI; the text of knowledge base entries and the agent's search queries), the speech synthesis service, the payment provider (Stripe) and the file storage service (Cloudflare R2; documents uploaded during a conversation and files and images uploaded to the knowledge base are kept in data centres in the European Union) among them. Personal data is therefore transferred abroad.

Transfers are made within the framework of KVKK art. 9, relying on the standard contracts published by the Turkish Personal Data Protection Board, and only to the extent the service requires.

Retention

There is currently no automatic deletion mechanism; records are kept until deletion is requested. Financial records are kept for the period the legislation requires.

Send deletion requests to info@agenola.ai.

Your rights (KVKK art. 11)

You have the right to learn whether your personal data is processed, to request information if it is, to learn the purpose and whether it is used accordingly, to know the third parties to whom it is transferred at home or abroad, to request correction if it is incomplete or wrong, to request erasure or destruction, to request that these actions be notified to third parties, to object to a result against you arising solely from automated analysis, and to claim compensation for damage.

Send applications to info@agenola.ai or in writing to 30 N Gould St Ste R, Sheridan, WY 82801, USA. Your request is concluded within thirty days at the latest.

Automated decisions

Tests and assessments built on Agenola may score candidates. These scores do NOT produce a decision on their own: the business using the result is contractually required to apply human review. If you nonetheless believe an automated assessment has been made about you, you may exercise your right to object under art. 11.