Privacy
Your content belongs to your company
Section titled “Your content belongs to your company”What your users enter or create in the Strategy Agent, such as Conversations, files, connected data and query results, we process on behalf of your company. Your company is the controller for it, and we are its processor under the data processing agreement.
We process this content only on your company’s instructions and only to provide the platform. We don’t use it to train AI models.
Who can read a Conversation
Section titled “Who can read a Conversation”A Conversation is readable only by the user who had it. The one exception is a Turn the user rated with 👍 or 👎: that one Turn, never the rest of its Conversation, becomes readable for the users of your Tenant who hold the Right Read rated Turns, and for the Strategy Agent staff authorised to read rated Turns, so that the agent can be improved. When the user removes their Feedback or deletes the Conversation, the Turn is private again at once. See Rate the agent’s answers.
A rated Turn includes the AI model’s reasoning, which the user sees in the agent’s answer as its steps. The reasoning can contain data the agent read to answer, such as rows from a Data Source or the contents of a web page. Holders of the Right Read rated Turns in your Tenant can read it, and so can our Super-admins who hold the matching Platform Right. When the user removes their Feedback, the Turn, its reasoning included, is private again at once.
Holders of Read rated Turns read rated Turns in the Admin App, one Turn at a time, without changing anything. Every time someone opens one, your Tenant’s Audit Log records who opened which Turn, never what it says. See Rated Turns.
What the web tools send out
Section titled “What the web tools send out”The agent can search the web, read web pages and open them in the AgentCore Browser when a user’s question needs it. Web search runs on Amazon’s own web index in Ireland: what the agent searches for stays within Amazon Web Services and isn’t sent to another search engine. Reading a page and the Browser reach the open internet with what a user asks for: the agent requests the page from that website’s server, which learns the page’s address but not who asked. The agent is instructed not to put confidential information into what it searches for or requests; it reads only public pages and never signs in anywhere. See Let the agent use the web and Data residency.
What we process as controller
Section titled “What we process as controller”For some data, such as sign-in data and security logs, we are the controller ourselves. The privacy policy explains what we process, for which purpose, on which legal basis and for how long.
Your rights
Section titled “Your rights”Everyone whose personal data we process has the rights of the GDPR, such as access, rectification, erasure and objection. The privacy policy explains how to use them. For content your company controls, your company answers the request, and we support it.
Contact
Section titled “Contact”Write to support@scavenger-ai.com. Our data protection officer is heyData GmbH, Schützenstr. 5, 10117 Berlin, datenschutz@heydata.eu.