Privacy Policy

Triagent LLC ("Triagent", "we", "us") — Privacy Policy Effective June 10, 2026 · Last updated June 10, 2026

1. Who we are and what this covers

Triagent LLC operates https://www.triagent.org and provides AI-assisted outbound and revenue-automation services to business clients. This Policy explains how we handle personal data in two distinct roles:

• As a controller — for visitors to https://www.triagent.org, prospects who contact us, and our clients' account/billing data. We decide why and how this data is used; this Policy governs it.
• As a processor (service provider) — for the prospect and engagement data we process on behalf of a client to deliver the service. For that data the client is the controller; our handling is governed by our Data Processing Agreement, and we act only on the client's documented instructions. If you are one of our client's prospects and want to exercise rights over that data, contact the client (we will route requests to them and assist).

2. Personal data we collect

From website visitors and prospects (controller):

• Identity and contact data you submit — name, work email, company, role, message (e.g., the intake/booking form).
• Communications you send us (email, support requests).
• Technical and usage data — IP address, device/browser, pages viewed, referring URL, and similar analytics, collected via cookies and similar technologies (see Cookie Policy).

From clients (controller):

• Account data — name, work email, organization, authentication identifiers (via our auth provider).
• Billing data — plan, transaction records, and limited payment metadata (full card details are handled by our payment processor, not stored by us).
• Support and configuration data — ICP settings, integrations you connect, and content you upload to your workspace.

On behalf of clients (processor):

• Business-contact data about the client's prospects — name, work email, company, title, public professional profile information.
• Engagement events — sent / delivered / opened / clicked / replied / bounced / unsubscribed / complained / meeting-booked, and AI-generated classifications and drafts associated with those interactions.

We do not intentionally collect special-category data (e.g., health, race, religion, biometrics) and instruct clients not to upload it.

3. How we use personal data (and our legal bases)

We do not sell personal data and do not "share" it for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA.

4. AI processing

We use third-party large-language-model providers (see Subprocessors) to score leads, classify replies, and draft messages. We do not permit these providers to use client or prospect data to train their general models, to the extent their terms allow us to disable such use. AI outputs are suggestions; a human supervises consequential actions.

5. Subprocessors and sharing

We share personal data only with:

• Subprocessors that help us run the service (auth, hosting, database, AI, email sending, enrichment, CRM sync, billing, error monitoring) — see the Subprocessor List. Each is bound by contract to protect the data and use it only to provide their service to us.
• Legal/safety recipients — when required by law, to enforce our agreements, or to protect rights and safety.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We never sell personal data.

6. International transfers

We are based in the United States and our subprocessors may process data in the US and other countries. Where we transfer personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the EU/UK Standard Contractual Clauses. Contact privacy@triagent.org for a copy of the relevant mechanism.

7. Retention

We keep personal data only as long as needed for the purposes above, to comply with law, or as a client instructs for data we process on their behalf. When no longer needed, we delete or anonymize it. Suppression-list entries (do-not-contact records) are retained as long as needed to honor opt-outs.

8. Your privacy rights

Depending on where you live, you may have the right to access, correct, delete, port, or restrict/object to processing of your personal data, and to opt out of sale/sharing or targeted advertising (we do none of these). To exercise rights over data we hold as a controller, email privacy@triagent.org. We will verify your request and respond within the time required by law (generally 30–45 days). You may appeal a denial by replying to our response. You will not be discriminated against for exercising these rights.

For data we process on behalf of a client, we forward your request to that client and assist them in responding.

EEA/UK residents may lodge a complaint with their supervisory authority. California residents: see the CCPA/CPRA disclosures incorporated above; we do not sell or share personal information and do not use sensitive personal information for inferring characteristics.

9. Security

We use technical and organizational measures including encryption in transit, access controls, least-privilege access, and per-tenant scoping of client data. No method of transmission or storage is perfectly secure. See the security measures annex of our DPA.

10. Children

The service is for businesses and is not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child provided us data, contact privacy@triagent.org and we will delete it.

11. Changes

We may update this Policy. Material changes will be posted at https://www.triagent.org with an updated effective date and, where required, notified to you.

12. Contact

Triagent LLC · 601 E Pete Rose Way, Cincinnati, OH 45202 · privacy@triagent.org