Privacy policy

Controller

Agent Crew, CVR DK45598780, is the controller. Contact us at hello@agtcrw.com. We do not publish a phone number.

Purposes and legal bases

We process personal data for the following purposes:

• Responding to a business enquiry (name, email, company, phone, message, service, locale and the page the enquiry came from). Legal basis: consent, GDPR Art. 6(1)(a), captured explicitly at submission. Retained for 24 months or until erasure on request.
• Operating user accounts in the tool at /app (email, password hash, session metadata). Legal basis: contract, Art. 6(1)(b). Retained for the life of the account.
• Producing crew recommendations (goal text, uploaded documents, derived proposals). Legal basis: contract, Art. 6(1)(b). Documents are deleted after 30 days, proposals after 24 hours, approved crews until you delete them.
• Preventing abuse (salted hash of IP address, counters). Legal basis: legitimate interest, Art. 6(1)(f). Retained for minutes to hours (the rate-limit window). We do not store raw IP addresses on enquiries.
• Security accountability (audit events). Legal basis: legitimate interest, Art. 6(1)(f). Retained for 12 months.

Document content and language models

When you use the tool at /app and upload documents or submit a goal, that content is sent to our LLM gateway, OpenRouter, to produce recommendations. OpenRouter forwards the request to the selected model provider. The content is treated as untrusted input and is not logged by us. The marketing pages do not upload documents.

Cookies and visitor measurement

Marketing pages set no cookies. The tool at /app sets one strictly necessary session cookie. We do not measure visitors, we set no tracking pixels, and we load no third-party marketing cookies. There is therefore no consent banner.

Your rights

You have the right of access, rectification, erasure, data portability, and to withdraw consent.

Exercise these rights by writing to hello@agtcrw.com. We identify the request by email address or case id and fulfil it manually. Withdrawing consent erases the enquiry; the consent record retains the fact of the withdrawal.

Processors

nordicway.dk hosts data in the EU. OpenRouter receives goal text and document content from the tool, as described above. Notification email about new enquiries is sent via the same hosting account, so no extra email provider is introduced.

Complaints

You may lodge a complaint with the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, dt@datatilsynet.dk, if you believe we process your data unlawfully.