Privacy Policy
1. Who we are
360ag Ltd (“360ag”, “we”, “us”) is a company registered in England and Wales (company number 17249435), with its registered office at Elcot Mill, Elcot Lane, Marlborough, SN8 2AZ. We are the data controller for the personal data described in this policy. We are registered with the Information Commissioner’s Office (ICO) under registration number ZC254087.
You can contact us about privacy at hello@360ag.io.
2. Who this policy covers
This policy applies to anyone who uses the 360ag website, platform or AI agents (“the Service”). It explains what personal data we collect, why we collect it, how we protect it and what your rights are.
3. What we collect
| Category | Examples |
|---|---|
| Identity and contact details | Name, email address, phone number, organisation, job title |
| Account data | Login details (passwords are stored in hashed form), account settings and preferences |
| Conversation data | Messages you send to our AI agents, the agents’ responses, and any information or files you share in those conversations |
| Technical data | IP address, browser and device type, log data, cookie identifiers |
| Support and communications | Messages you send us, and our replies |
We collect this data directly from you, and technical data automatically when you use the Service.
Conversations may contain whatever you choose to type. Please avoid sharing sensitive information (such as health details, or information about other people) unless it is necessary. If you do share it, we treat it with the same protections as everything else, and we use it only to provide the Service to you.
4. How we use your data, and our legal basis
| Purpose | Data used | Legal basis (UK GDPR) |
|---|---|---|
| Creating and managing your account and providing the Service | Identity and contact, account | Contract |
| Storing your conversation history so our AI agents have context in later conversations | Conversation data | Contract (this is part of the Service you have asked for) |
| Contacting you about the Service, including support and important changes | Identity and contact, communications | Contract, and legitimate interests |
| Keeping the Service secure, preventing misuse and fixing faults | Technical, account, conversation data | Legitimate interests (running a secure and reliable service) |
| Meeting legal and accounting obligations | Identity and contact, account | Legal obligation |
| Sharing your data with a named third party at your request | As you specify | Your explicit consent |
| Marketing Emails, if you consent | Identity and contact | Consent, or the “soft opt in” for existing customers, with an unsubscribe option in every message |
Where we rely on legitimate interests, we have weighed them against your rights and freedoms. You can ask us for details of that assessment.
5. AI agents and your conversations
We store your conversations and use them to give our AI agents context, so their responses are relevant and consistent with what you have told them before. We do not use your conversations to train AI models. AI agents can make mistakes, so please check important outputs before relying on them.
Our agents are powered by 3rd party providers. To generate a response, the content of your conversation is sent to them. They may process it only on our instructions and under a written contract. They do not use your data to train their models.
You can delete your conversation history by contacting us.
6. Who we share your data with
We do not sell your personal data, and we do not share it with third parties for their own purposes.
We share data only in these situations:
- When you ask us to. If you explicitly request that we share your data with a named person or organisation, we will do so, and only in the way you request. You can withdraw that request at any time.
- With our service providers. These act as processors on our instructions and are bound by contract to protect your data and use it only for us.
- Where the law requires it, for example under a court order or a request from a regulator or law enforcement authority.
7. International transfers
Some of our service providers process data outside the UK, for example in the United States. When this happens, we only use providers that have approved legal protections in place, so your data is protected to a UK standard. You can contact us for details.
8. How long we keep your data
- Account and contact details: for as long as you have an account, and for 1 year afterwards.
- Conversation data: until you delete it or for 1 year after you close your account.
- Technical and log data: 6 months.
- Records we must keep by law (such as invoices): 7 years.
When the retention period ends, we delete or anonymise the data.
9. Security
We use appropriate technical and organisational measures to protect your data. If a breach is likely to put your rights at risk, we will notify the ICO and, where required, you.
10. Your rights
Under UK data protection law you have the right to:
- be told how your data is used (this policy)
- access a copy of your data
- have inaccurate data corrected
- have your data erased in certain circumstances
- restrict our use of your data in certain circumstances
- receive your data in a portable format, where we process it by automated means under contract or consent
- object to processing based on legitimate interests
- withdraw consent at any time, where we rely on it (this does not affect earlier processing)
To exercise any of these rights, email hello@360ag.io. We will normally respond within one month, and there is no charge in most cases.
If you have a concern, please contact us first so we can try to put it right. You also have the right to complain to the ICO at ico.org.uk or on 0303 123 1113.
11. Cookies
We may use essential cookies to run the Service, and, with your consent, analytics cookies. You can manage your choices through settings.
12. Children
The Service is not intended for anyone under 18. We do not knowingly collect data from children.
13. Changes to this policy
We may update this policy from time to time. We will post the new version here with a revised date and, for significant changes, let you know directly.