This policy explains how The iCentric Agency Ltd (“we”, “us”) collects and uses personal data when you use AgenticWebTeam (the “Service”) at agenticwebteam.com and app.agenticwebteam.com. We are the data controller for account data and a data processor for the content you manage through the Service.
The Service is owned and operated by The iCentric Agency Ltd, a company registered in England and Wales (Company Number 09873359), Colworth House, Colworth Science Park, Sharnbrook, Bedfordshire MK44 1LQ, United Kingdom. For any privacy question, contact us at privacy-awt@agenticwebteam.com.
We collect data you provide and data generated as you use the Service:
We use personal data to provide and secure the Service, operate the assistant on your behalf, bill for usage, provide support, and meet legal obligations. Our lawful bases include contract, legitimate interests and consent where required.
When you connect a CMS, the assistant reads and writes content through your provider using the tokens you supply, scoped to the access you grant. Prompts and the content needed to fulfil a request may be processed by our AI model providers under contract; we do not use your content to train third-party models. Enterprise workspaces may opt for a private model deployment routed through Amazon Web Services (Amazon Bedrock) in an AWS region of their choosing, in which case AI processing for that workspace happens within AWS in that region.
If your workspace enables MCP access (“use your own AI”), conversations with your own AI client are processed by that AI provider under your agreement with them — they do not pass through us. We receive only the resulting tool calls, and record them (tool, a truncated input summary, outcome and timing) for your workspace's audit and activity views.
If a workspace administrator connects Google to the Service's SEO features, we ask Google — through Google's OAuth consent screen — for access to Google Search Console and Google Analytics, plus the email address of the Google account used. You choose which Search Console site and which Google Analytics property to connect; we only access those.
Google Analytics access is read-only. Search Console access includes write permission, which we use for one purpose only: submitting and resubmitting your sitemap to Search Console when new or updated pages are published, so search engines pick up your content promptly. We make no other changes in Search Console.
What we access and why:
Storage. The OAuth refresh token Google issues is stored encrypted (AES-256) and is used only to obtain short-lived access tokens for the access described above. We never store your Google password. We never write to, or change settings in, Google Analytics, and the only write we make in Search Console is the sitemap submission described above. Performance figures are stored as daily snapshots against your workspace so the assistant can show trends over time.
Use and sharing. Google data is used only to provide the SEO features you asked for: performance dashboards, reports, keyword tracking and strategy and content recommendations inside your workspace. Figures from it may be included in prompts to our AI model providers to produce those reports and recommendations, under the same contractual terms as section 4; it is not used to train AI models. We do not sell Google user data, do not use it for advertising, and do not share it with anyone outside the sub-processors needed to run the Service, except where you direct us to or the law requires.
Disconnecting and deletion. A workspace administrator can disconnect Google at any time from Integrations → SEO → Disconnect in the app. Disconnecting revokes our access with Google — the Service is removed from the connected apps shown in your Google account — and deletes the stored token immediately. You can also revoke access from your Google account at myaccount.google.com/permissions. Historical performance snapshots remain in your workspace so reconnecting picks up where you left off; they are deleted with the rest of your workspace data under section 7, or sooner on request to privacy-awt@agenticwebteam.com.
Limited Use. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
We share data with sub-processors who help us run the Service under data protection terms: hosting and infrastructure, AI model providers (including Amazon Web Services for enterprise private-LLM deployments), authentication (including Microsoft, when your team signs in with Microsoft), email delivery and payment processing. A current list is available on request from privacy-awt@agenticwebteam.com. We do not sell personal data.
Separately, if your workspace administrators connect Microsoft Teams notifications, review-related content (document names, requester emails and review notes) is delivered to the Microsoft Teams channel webhook your administrator configures — that delivery is at your organisation's direction, to your own Microsoft tenant.
We keep account and usage data for as long as your account is active and as needed for legal and operational purposes; workspace history is permanently deleted 30 days after a cancelled subscription ends. Enterprise workspaces may configure a shorter rolling retention window, in which case chat history, stored files and external-AI activity older than the window are permanently deleted on a daily schedule while the audit log and billing records are kept. You can ask us to delete your data subject to those requirements.
Under UK GDPR you have rights to access, correct, delete, restrict and port your data, and to object to certain processing. To exercise these, email privacy-awt@agenticwebteam.com. You may also complain to the Information Commissioner's Office (ICO).
We use essential cookies to run the Service — signing you in, keeping the site secure, and remembering your cookie choice. With your consent, we also use analytics cookies (Google Analytics / Google Tag Manager) to understand how the site is used and improve it. Analytics is off by default and only activates if you choose “Accept analytics” in the cookie banner.
You can change your choice at any time via Cookie preferences, or by clearing this site's data in your browser.
We use encryption in transit and at rest, scoped and encrypted credentials (AES-256), role-based access controls and audit logging. Report a security concern to support-awt@agenticwebteam.com.
We'll post any changes here and update the date above. Privacy questions: privacy-awt@agenticwebteam.com · general support: support-awt@agenticwebteam.com.
Create pages, edit content, change layouts, images and templates on a live demonstration site
Thank you, your request has been received and we'll be in touch shortly — the Agentic Web Team