Privacy Policy
Last updated: February 18, 2026
At Cicerai S.L. ("CC Agents," "we," "our," or "us"), we are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website cc-agents.io and our AI agent platform (collectively, the "Service"). By accessing or using our Service, you agree to this Privacy Policy. If you disagree with any part of this policy, please do not use our Service.
1. Data Controller
Cicerai S.L. is the data controller responsible for your personal data. For privacy-related enquiries, please contact us at legal@cc-agents.io.
2. Information We Collect
We collect several categories of information when you use the Service:
Account Information
When you register, we collect your name, email address, company name (optional), and a hashed password.
Usage Data
We automatically collect data about how you use the Service, including IP address, browser type and version, pages visited, actions performed, timestamps, and error logs.
Content Data
Any content you submit to the Service — including prompts, agent configurations, uploaded files, and processed documents — is stored to deliver the Service to you.
Payment Data
Payments are processed by Stripe. We do not store your full card number. We receive billing address and transaction identifiers from Stripe.
Communications
If you contact us via email or support channels, we retain those communications to assist you and improve our Service.
3. How We Use Your Information
We use the information we collect to:
- —Provide, maintain, and improve the Service
- —Create and manage your account
- —Process payments and send invoices
- —Send transactional emails (account updates, billing notifications, security alerts)
- —Send marketing emails — only with your explicit consent
- —Detect, prevent, and address security threats and abuse
- —Comply with applicable legal and regulatory obligations
- —Analyse aggregated, anonymised usage trends to improve the product
4. Legal Basis for Processing (GDPR)
We process your personal data under the following legal bases:
- —Contract: to provide the Service you have signed up for
- —Legitimate interests: for security, fraud prevention, and product improvement
- —Consent: for marketing emails — you may withdraw consent at any time
- —Legal obligation: to comply with applicable laws and regulations
5. Sharing Your Information
We do not sell your personal data. We may share data only in the following circumstances:
- —Service providers: hosting (cloud infrastructure), payment processing (Stripe), transactional email, and analytics — all bound by data processing agreements
- —Legal authorities: when required by law, court order, or valid legal process
- —Business transfers: in the event of a merger, acquisition, or asset sale, your data may be transferred as a business asset with prior notice to you
6. Cookies and Tracking Technologies
We use cookies and similar technologies on our Service:
- —Essential cookies: required for authentication, security, and core Service functionality
- —Analytics cookies: to understand how users interact with the Service using anonymised usage statistics
Managing Cookies
You can control and delete cookies through your browser settings. Disabling essential cookies may impair Service functionality.
7. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymise your personal data within 90 days, except where we are required to retain it for legal, regulatory, or accounting purposes.
8. Your Rights
Under the GDPR and applicable data protection law, you have the following rights regarding your personal data:
- —Access: request a copy of the personal data we hold about you
- —Rectification: request correction of inaccurate or incomplete data
- —Erasure: request deletion of your data ("right to be forgotten")
- —Restriction: request that we limit how we process your data in certain circumstances
- —Data portability: receive your data in a structured, machine-readable format
- —Objection: object to processing based on legitimate interests or for direct marketing
- —Withdraw consent: at any time, without affecting the lawfulness of prior processing
How to Exercise Your Rights
Contact us at legal@cc-agents.io. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority — in Spain, this is the Agencia Española de Protección de Datos (AEPD) at www.aepd.es.
9. Data Security
We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, role-based access controls, and regular security assessments. However, no method of electronic storage or transmission over the internet is 100% secure, and we cannot guarantee absolute security.
10. International Data Transfers
We may transfer your personal data to countries outside the European Economic Area (EEA) in connection with our service providers. Where we do so, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.
11. Children's Privacy
Our Service is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at legal@cc-agents.io and we will promptly delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "last updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.
13. Contact Us
For privacy-related questions, to exercise your rights, or for any other enquiries regarding this policy:
Email: legal@cc-agents.io Company: Cicerai S.L., Spain