305 Ventures, LLC, doing business as Agently. Effective September 29, 2026.
This addendum applies whenever Agently handles a client's data while doing work for that client. It is part of every client agreement unless the agreement says otherwise. Where the two conflict, the signed client agreement wins.
Definitions
- Client: the business that hired Agently.
- Client Data: any information the Client gives us, lets us access, or that we collect for the Client while doing the work. This includes information about the Client's customers and employees.
- Personal Information: Client Data that identifies a person.
- Subprocessor: an outside service Agently uses to do the work that may store or process Client Data.
Roles
The Client decides what data is used and why. Agently handles Client Data only to do the work the Client asked for, and only on the Client's instructions.
What we do with Client Data
Depending on the engagement, we may:
- log into the Client's own systems (for example point of sale, scheduling, accounting, CRM, email marketing or website tools) with access the Client grants;
- export data from those systems to analyze, clean, match or move it;
- build reports, automations, forms or small applications that read or write Client Data;
- send Client Data to AI services to analyze, summarize or transform it.
We do not use Client Data for any other purpose, sell it, or use it to train AI models.
Where the Client's work lives
What we build for a Client belongs to the Client. Our aim is that it runs in the Client's own accounts, so the Client can keep using it without us. Where something has to run in an Agently account during the work, we will say so in writing and move it to the Client's accounts, or hand over what is needed to run it, when the engagement ends or on request.
AI services
When we send Client Data to an AI service, we use accounts where training on our data is turned off, so the provider does not use what we send to train its models. We send only what the task needs. The providers are listed on the Subprocessors page. Some work runs on AI models on our own hardware, where the data does not leave our computer.
Sensitive data
Unless the client agreement says otherwise, we do not accept health information covered by HIPAA, full payment card numbers, Social Security numbers, bank account credentials, or similar regulated data. If the work needs it, we agree the handling in writing first. The Client should not give us access to such data without that agreement.
Security
We protect Client Data with access limited to the people doing the work, strong unique passwords and two-factor authentication where available, encrypted connections, and services with recognised security practices. We use logins created for the engagement rather than shared personal logins where the Client's system allows it.
Subprocessors
We use the services listed on the Subprocessors page. We will update that page before adding a new service that will store Client Data, and a Client may object in writing. If we cannot reasonably avoid the new service for that Client, either side may end the affected work.
People asking about their data
If a person asks us about their information that is part of Client Data, we will pass the request to the Client and help the Client answer it.
Retention and deletion
We keep Client Data only as long as the work needs it. Within 30 days after an engagement ends, or sooner on the Client's request, we return what the Client asks for and delete the rest from our accounts, except copies we must keep by law or that sit in routine backups until they expire. We remove our access to the Client's systems when the work ends, and ask the Client to remove any logins created for us.
Breach notice
If we learn that Client Data in our care was accessed without permission, we will tell the Client without undue delay, and within 72 hours of confirming it, with what we know and what we are doing about it.
The Client's part
The Client confirms it has the right to share the data with us and to have us do the work, including any notice or consent its own customers or employees need. The Client is responsible for the access it grants us and for removing access it no longer wants us to have.
Contact
305 Ventures, LLC, doing business as Agently Greenville, South Carolina jon@agently.bot