Privacy Policy

Last updated: 11 October 2026

This Privacy Policy explains how CoreAgent.ai (“CoreAgent”, “we”, “us”) collects, uses and protects personal information when you visit coreagent.ai, join our waitlist, or — once the product launches — use our AI calling agent, AI receptionist or AI customer support service (together, the “Service”).

1. Who we are

CoreAgent.ai is the controller of personal information collected on this website and waitlist. Once a business customer deploys the Service, that business is the controller of its callers’ data; CoreAgent processes that data as a processor on the customer’s instructions.

Privacy questions: [email protected].

2. Information we collect

Information you give us

• Waitlist signups. Email address, the page you signed up from, and the date and time.
• Correspondence. Messages and contact details you send us so we can reply.

Information collected automatically

• Technical logs. IP address, browser type, request time and the pages you open. We use this to keep the site secure and working.
• Referrer. If you arrive from another page, our server may record that address.

Once the Service launches (business customers and their callers)

• Account data. Names, work emails, business details and configuration (hours, services, policies, integrations).
• Call data. Depending on each customer’s settings: call audio, transcripts, caller numbers, booking or ticket outcomes, and a written summary. The customer decides what is recorded, transcribed and kept, and for how long.
• Integration data. Information the Service reads from or writes to tools the customer connects (calendars, orders, CRM, helpdesk).

3. How we use your information

• To tell you when CoreAgent.ai launches and send product updates you asked for.
• To operate, secure and improve the website and the Service.
• To answer questions and provide support.
• To detect abuse, prevent fraud and keep the Service reliable.
• To comply with law, enforce our Terms of Service, or defend legal claims.

We do not sell personal information. We do not use waitlist emails for advertising networks or unrelated marketing.

4. Legal bases (EEA / UK)

Where GDPR or UK GDPR applies, we process personal information on these bases:

• Consent — joining the waitlist and optional marketing emails.
• Contract — providing the Service to a paying customer.
• Legitimate interests — securing the website, improving the product, and sending strictly necessary service notices.
• Legal obligation — tax, accounting and lawful requests.

5. How we share information

We share information only with service providers that help us run CoreAgent.ai, under contracts that limit how they may use it:

• Email delivery. Brevo sends transactional and notification emails (for example, a waitlist confirmation to our inbox).
• Hosting. Our website, application and stored files sit with our hosting provider.
• Fonts. The site loads typefaces from Google Fonts, which may receive your IP address when your browser requests them.
• Telephony and model providers (after launch). Speech recognition, voice synthesis and the language model that powers the agent, solely to complete the call.

We may also disclose information if required by law, to protect people from serious harm, or as part of a merger, acquisition or sale of assets. In a sale, this policy continues to apply until you are told otherwise.

Business customers may export their own call records and may share them inside their organisation. That sharing is their responsibility.

6. How long we keep it

Waitlist records stay until you ask to be removed or until the launch communications they were collected for are finished. Server logs are kept for a limited period for security. Call data belonging to a business customer is retained according to that customer’s settings and our then-current data processing terms. When we no longer need information, we delete or irreversibly anonymise it.

7. Your rights

Depending on where you live (including the EEA, UK, California and other US states with privacy laws), you may have the right to:

• access the personal information we hold about you;
• correct inaccurate information;
• delete it, or ask us to stop or limit certain processing;
• export it in a portable format;
• withdraw consent at any time (this does not affect processing already done);
• object to processing based on legitimate interests;
• opt out of “sale” or “sharing” of personal information as those words are defined in US state law — we do not sell or share data for cross-context advertising;
• complain to a supervisory authority (for example, the ICO in the UK or your local EU DPA).

To exercise any of these rights — including removal from the waitlist — email [email protected]. We will respond within the time the applicable law requires. We may need to verify your identity first. We will not discriminate against you for exercising a privacy right.

If you are a caller who spoke to a CoreAgent deployed by a business, please contact that business first. They control the call record. We will help them honour a valid request.

8. Cookies and similar technology

This marketing website does not set advertising or analytics cookies. We may use a strictly necessary session cookie or similar storage only if a future feature requires it (for example, to keep a logged-in customer signed in). Your browser may still send a cookie that Google Fonts or a similar third-party font host sets when it serves a file. You can block third-party cookies in your browser; the site will still work.

9. Security

We use technical and organisational measures appropriate to the risk: HTTPS/TLS in transit, access controls, and waitlist storage that is not publicly reachable from the web. No method of transmission or storage is 100% secure. If we become aware of a breach that affects your personal information, we will notify you and regulators as the law requires.

10. International transfers

Our providers may process data in countries other than yours, including the United States and the European Economic Area. Where a transfer needs a safeguard, we use recognised mechanisms such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

11. Children

CoreAgent.ai is a business product. The website and Service are not directed at children under 16, and we do not knowingly collect their personal information. If you believe we have, email us and we will delete it.

12. Changes to this policy

We will post updates on this page and change the “Last updated” date. If a change is material, we will also email waitlist members or account owners.

13. Contact

Privacy: [email protected]
General: [email protected]

If we appoint an EU or UK representative, we will add their details here.