Legal

Data Policy

How Grezorea Agents handles, stores, and protects the data that powers your agents.

What Data We Process

Grezorea Agents processes the data you connect to your agents. This includes call recordings and transcripts, conversation logs, contact information provided by your users, CRM records synced via integration, and any documents or knowledge bases you upload for agent reference. We also process account and billing data needed to operate your subscription.

How We Use Your Data

Your data is used solely to operate, secure, and improve the agents you configure: powering responses, generating analytics, and refining performance over time. We do not sell customer data. We do not use your conversations or agent configurations to train models for other customers without your explicit, opt-in consent.

Data Storage & Encryption

All data is encrypted at rest using AES-256 and in transit using TLS 1.2 or higher. Data is stored on hardened cloud infrastructure with automated backups, redundancy, and access logging. Backups are retained for 30 days and then permanently deleted.

Data Residency

By default, customer data is processed in the region closest to your primary users to minimise latency. Enterprise customers can request region-locked storage to meet data residency requirements for GDPR, UK GDPR, or other jurisdiction-specific obligations. Contact our team to configure residency settings.

Retention & Deletion

You control retention windows for call recordings and transcripts from your dashboard, with options ranging from 7 days to indefinite. On account closure, all customer data is queued for permanent deletion within 30 days unless legal obligations require longer retention. You can request immediate deletion by contacting support@agents.grezorea.com.

Access Controls

Access to customer data by Grezorea personnel is limited to authorised team members on a strict need-to-know basis, protected by role-based permissions, multi-factor authentication, and audit logging. We do not grant access to customer data for any purpose other than operating, securing, and supporting the platform.

Sub-processors

We use a limited set of sub-processors to deliver the platform, including cloud infrastructure providers, AI model providers, and communications providers. All sub-processors are bound by data processing agreements that prohibit use of your data for their own purposes. A current sub-processor list is available on request.

Your Data Rights

Depending on your jurisdiction, you may have rights to access, correct, export, restrict, or delete your data, or to object to certain processing activities. To exercise any of these rights, contact our privacy team. We will respond within the timeframe required by applicable law, typically within 30 days.

Data questions? support@agents.grezorea.com