Privacy Policy

Last updated: 27 May 2026

1. Introduction

Sedge5 Technology Solutions ("we", "us", "our") operates the AgentFlow platform. This Privacy Policy explains how we collect, use, and protect your information when you use our services. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

Sedge5 Technology Solutions is the data controller for the personal data processed through this service. Contact: [email protected].

3. Information We Collect

We collect the following categories of information:

• Account information: email address provided during checkout, used for account identification and communication.
• Billing information: payment details are processed and stored by Stripe. We do not store card numbers or bank details on our servers.
• Usage data: API call timestamps, request counts, rate limit events, and error logs for service operation and abuse prevention.
• Technical data: IP addresses, API key prefixes, and user agent strings included in API requests.

4. How We Use Your Information

We use your information to: provide and maintain the AgentFlow service; process payments and manage subscriptions; enforce rate limits and prevent abuse; communicate service updates and security notices; comply with legal obligations.

5. Legal Basis for Processing

We process your personal data on the following bases: performance of our contract with you (service delivery); legitimate interests (security, abuse prevention, service improvement); legal obligation (tax and regulatory compliance); consent (marketing communications, if applicable).

6. Data Sharing

We share data only with: Stripe for payment processing; infrastructure providers (Oracle Cloud) for service hosting. We do not sell your personal data. We do not share data with advertisers.

7. Data Retention

Account and billing data is retained for the duration of your subscription and for 6 years thereafter for tax and legal compliance. Usage logs are retained for 90 days. You may request earlier deletion of non-essential data.

8. Data Security

We implement appropriate technical and organisational measures including: encryption in transit (TLS 1.2+); hashed API keys (SHA-256); access controls and audit logging; regular security reviews.

9. Your Rights

Under UK GDPR, you have the right to: access the personal data we hold about you; rectify inaccurate data; request erasure of your data; restrict or object to processing; data portability; lodge a complaint with the Information Commissioner\'s Office (ICO).

10. International Transfers

Our servers are located in Oracle Cloud data centres. Where data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

11. Cookies

The AgentFlow website uses no tracking cookies. The API does not use cookies. If this changes, this policy will be updated accordingly.

12. Children

AgentFlow is not intended for use by individuals under 18. We do not knowingly collect data from children.

13. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via the email associated with your account. The "Last updated" date at the top will reflect the most recent revision.

14. Contact

For privacy-related enquiries, contact us at [email protected].