Privacy Policy

Last updated: July 20, 2026

1. Who We Are

AgentsOX (“we”, “our”, “us”) is operated by Nadav Oxenberg, based in Israel. We provide AI tool workshops, business automation, and related consulting or implementation services.

2. Scope of This Policy

This policy explains how we handle personal information when you visit our website, submit the contact form, email us, register interest in a workshop, or work with us on an automation or AI tooling project.

Client projects, workshops, or paid engagements may also be governed by a separate written agreement. If a separate agreement conflicts with this public policy, the separate agreement controls for that engagement.

3. Information We Collect

We collect only information reasonably needed to operate the website, respond to inquiries, provide workshops, and deliver services.

  • Contact form data: Name, email address, message content, and technical submission metadata processed through our website contact endpoint.
  • Contact attribution: When a contact form is sent successfully, we record a query-free landing path, referring domain, limited UTM campaign fields, and a bounded path through our public website. This analytics record does not include the visitor’s name, email address, message, query string, or URL fragment.
  • Email and direct communications: Information you choose to send us, including project requirements, company details, files, or scheduling information.
  • Workshop and service information: Information needed to plan or deliver a workshop or project, such as participant names, business context, workflow requirements, and tool preferences.
  • Website analytics: Aggregated page view and device information collected through Cloudflare Web Analytics. Cloudflare states that this analytics product does not use client-side state such as cookies or local storage to track visitors and is designed to avoid identifying or fingerprinting individual visitors.
  • Local browser storage: We store small preferences in your browser, such as selected theme and limited contact-form abuse prevention state. Session storage temporarily holds the bounded contact-attribution fields described above for the current browser tab. You can clear this through your browser settings.
  • Server and security logs: Hosting providers may process IP addresses, browser information, timestamps, and request metadata to operate and secure the website.

4. How We Use Information

We use personal information for the following purposes:

  • Responding to your inquiries and scheduling follow-up conversations.
  • Evaluating, preparing, and delivering AI workshops, automation work, or consulting services.
  • Operating, debugging, securing, and improving the website.
  • Preventing spam, abuse, fraud, or misuse of our contact channels.
  • Maintaining business records and complying with applicable legal, tax, accounting, or regulatory obligations.

We do not sell your personal information. We do not use your contact details for unrelated third-party advertising.

5. Legal Bases

Where privacy laws such as the GDPR or similar laws apply, we rely on one or more of the following legal bases:

  • Contract or pre-contract steps: To respond to requests, discuss possible work, and deliver agreed services.
  • Legitimate interests: To operate the website, protect security, improve services, prevent abuse, and maintain business communications.
  • Consent: Where you voluntarily provide information, request contact, or where a specific law requires consent.
  • Legal obligation: Where we must retain or disclose information for tax, accounting, legal claims, or regulatory reasons.

6. AI Tools and Automated Processing

We may use AI tools, coding assistants, large language models, and automation platforms to help analyze requests, draft responses, prepare workshop materials, build software, or support client workflows.

  • We aim to minimize personal information sent to AI providers and avoid submitting sensitive personal information unless it is necessary for the requested service.
  • AI outputs may be inaccurate, incomplete, or unsuitable without human review. We review important outputs before relying on them for client-facing work.
  • Different AI providers may have different logging, retention, routing, and model-training policies. Where a client engagement has stricter requirements, those should be agreed in writing before work begins.
  • We do not use AI to make decisions about you that have legal or similarly significant effects without meaningful human involvement.

7. Google User Data (AgentsOX Mail)

AgentsOX Mail is an application that, only with your explicit authorization through Google’s OAuth consent screen, connects to your Google account to help you read, reply to, draft, and organize your email. This section describes how AgentsOX Mail accesses, uses, stores, and shares Google user data. For Google user data, this section controls over any more general statement elsewhere in this policy.

Scopes we request and why

  • Gmail access (gmail.modify): Lets the application read your messages and threads, send replies, create and update drafts, and change message state such as labels and read/unread status. We request this scope so the application can perform the mailbox actions you ask it to perform. We do not request permission to permanently delete your messages.

You grant this access through Google’s consent screen and can revoke it at any time at myaccount.google.com/permissions. Revoking access stops all further access immediately.

How we use Google user data

  • We use your Gmail data only to provide and improve the user-facing features you request - reading and displaying messages, generating and sending replies, creating drafts, and organizing mail.
  • We do not use Gmail data for advertising of any kind.
  • We do not sell or rent Gmail data, and we do not transfer it except as needed to provide the features you request (see Sharing below) or where required by law.
  • We do not use Gmail data to train, retrain, or improve generalized or non-personalized artificial-intelligence or machine-learning models. Where AI is used to draft a reply or summarize a message at your request, the relevant content is sent to an AI provider solely to produce that output for you, under terms that prohibit the provider from using your content to train its general models.
  • Humans at AgentsOX do not read your Gmail data except: (a) with your explicit consent (for example, to debug an issue you report); (b) where necessary for security purposes such as investigating abuse; (c) to comply with applicable law; or (d) where the data has been aggregated and anonymized and is used for internal operations.

How we store and protect Google user data

  • OAuth access and refresh tokens are stored encrypted and used only to perform the actions you request.
  • We keep the minimum message data needed to provide the feature you requested, for the shortest time reasonably necessary, and we process message content in transit rather than retaining full copies where feasible.
  • Access to systems holding Google user data is restricted and protected with encryption in transit (HTTPS/TLS) and access controls.

Sharing of Google user data

We share Google user data only with infrastructure and AI sub-processors strictly as needed to operate the features you request (for example, our hosting provider and the AI provider that generates a draft you ask for). These providers are bound by terms consistent with the Google API Services User Data Policy. We never sell Google user data and never use it for advertising.

Retention and deletion

  • When you revoke access or ask us to delete your data, we delete stored tokens and any retained Google user data within a reasonable period, except where retention is required by law.
  • To request deletion, email nadav@agentsox.com or revoke access at myaccount.google.com/permissions.

Limited Use disclosure

AgentsOX Mail’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

8. Third-Party Services

We use third-party providers to operate the website and services. These providers process information under their own terms and privacy policies, and in some cases act as processors or service providers for us.

  • Cloudflare: Website hosting, deployment, content delivery, security logs, and privacy-focused web analytics (Cloudflare Web Analytics).
  • Cloudflare Workers: Contact form processing, bot API handling, request validation, abuse prevention, contact-form email delivery, and privacy-bounded contact attribution through Workers Analytics Engine.
  • Google Fonts: Font delivery for the website.
  • Business email provider: Email hosting and delivery for messages sent to nadav@agentsox.com.
  • AI and developer tools: Tools such as Claude Code, ChatGPT, OpenRouter, or similar providers may be used during workshops, development, or automation work depending on the engagement.
  • External project links: Our site links to client work, workshop sites, and third-party websites. Their privacy practices are governed by their own policies.

9. Cookies and Local Storage

We do not currently use advertising cookies. Cloudflare Web Analytics is described by Cloudflare as not using client-side cookies to track visitors. The website uses local browser storage for theme preference and contact-form abuse prevention, and session storage for the bounded contact-attribution fields described in Section 3. You can clear both through your browser settings.

If we later add cookies or tracking technologies that require consent, we will update this policy and add an appropriate consent mechanism before using them.

10. International Transfers

We are based in Israel, and some providers may process information in the United States, the European Union, Israel, or other locations. Where applicable law requires safeguards for international transfers, we rely on appropriate mechanisms used by our service providers, such as adequacy decisions, standard contractual clauses, data processing terms, or equivalent safeguards.

11. Data Retention

We keep personal information only as long as reasonably necessary for the purpose collected, unless a longer period is required or permitted by law.

  • Contact inquiries: Usually retained for up to 24 months after the last interaction, unless needed for an active project, dispute, or legal obligation.
  • Workshop and project records: Retained for the duration of the engagement and for a reasonable period afterward for business records, continuity, support, tax, accounting, and legal purposes.
  • Website analytics: Handled by Cloudflare in aggregated form according to Cloudflare Web Analytics documentation and settings.
  • Successful-contact attribution: Stored in Cloudflare Workers Analytics Engine for three months. The record contains the bounded acquisition dimensions described in Section 3, a generated request ID, and a count of one successful submission; it excludes the submitted name, email address, and message.
  • Local and session storage: Remains on your device until you clear it, close the relevant session, or the browser removes it.

12. Security

We use reasonable technical and organizational measures to protect information, including HTTPS/TLS, access controls, reputable hosting and form providers, and limited access to business systems. No electronic transmission or storage method is completely secure, so we cannot guarantee absolute security.

13. Your Rights

Depending on your location and applicable law, you may have rights to access, correct, delete, restrict, object to processing, request portability of, or withdraw consent for your personal information.

To make a privacy request, email nadav@agentsox.com. We may need to verify your identity before acting on a request. We will respond within a reasonable period and, where a law sets a specific deadline, within that legal deadline.

14. Children

Our website and services are intended for business users and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will take appropriate steps to delete it.

15. Changes to This Policy

We may update this privacy policy from time to time. The “Last updated” date reflects the latest version. If we make material changes to how we process personal information, we will take reasonable steps to make the updated policy available.

16. Contact Us

For privacy questions, concerns, or data requests:

← Back to AgentsOX