How Agent Sculptor collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR).
Last updated: 18/09/2026
We collect information you provide directly to us and certain information automatically when you use our website.
When you request early access, we collect:
When you visit our website, we automatically collect:
We use your personal data for the following purposes, based on legitimate interests, contractual necessity, or your consent:
To respond to your request, discuss your workflow with you, and onboard you to the product.
To understand which workflows people want sculpted and to prioritize what we build. We never publish your workflow description or attribute it to you without your permission.
To analyze website usage and improve our services through analytics and feedback.
To comply with applicable laws, regulations, and legal processes, including data retention requirements.
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction.
Despite our efforts, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but commit to promptly addressing any security incidents.
We do not sell personal data, and we do not share it for anyone else's marketing. We disclose the data described in section 1 only to the categories of recipient below, and only as far as each needs it.
Our website, its form-handling function, and the early-access list are hosted by Cloudflare, Inc.
Each signup triggers a notification email to us delivered by Resend, which processes the contents of that message.
The early-access form uses Google reCAPTCHA to tell people apart from automated submissions. Google receives request data for that purpose.
Google Analytics and Microsoft Clarity, loaded through Google Tag Manager and only with your consent, as described in our Cookie Policy.
Our accountants, auditors and lawyers, under a duty of confidence, and public authorities or courts where we are legally required to disclose.
If our business or part of it is merged, acquired or reorganised, personal data may pass to the acquirer. We would tell you before your data became subject to a different privacy policy.
We process personal data within the European Economic Area wherever we can. Some of the providers named in section 4 are established in the United States and may process data there or in other countries outside the EEA.
Where personal data leaves the EEA, we rely on the European Commission's Standard Contractual Clauses, together with any additional safeguards the transfer requires, or on an adequacy decision covering the destination country where one applies. You may ask us for a copy of the safeguards we rely on, using the contact details below.
As a data subject under GDPR, you have the right to access your data and receive a copy of it, to correct inaccurate data, to request deletion, to receive it in a portable format, to object to processing based on legitimate interests, to ask us to limit what we do with it while a question is being resolved, and to withdraw consent at any time where we rely on it (such as for analytics cookies).
To exercise any of these rights, please contact us using the information below. We will respond within 30 days as required by GDPR. Exercising these rights is free of charge.
You also have the right to lodge a complaint with a supervisory authority, in the Member State where you live, where you work, or where you believe the problem occurred. Ours is the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 Bucharest, dataprotection.ro. We would rather you came to us first, but you do not have to.
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.
Retained while we evaluate and onboard requests, and for 3 years after last contact, or until you request deletion.
Automatically deleted after 26 months by Google Analytics.
Retained as required by Romanian law, typically 5-10 years for business records.
Agent Sculptor is a professional tool, and this website is directed at people acting in a professional capacity. It is not directed at children, and we do not knowingly collect personal data from anyone under 16.
If you believe a child has given us personal data, contact us and we will delete it.
If you are a California resident, the California Consumer Privacy Act as amended gives you the right to know what personal information we collect about you and why, to receive a copy of it, to request its deletion, to request correction of inaccurate information, and not to be treated differently for exercising any of these rights.
We do not sell or share personal information as the CCPA defines those terms, and we do not process it for cross-context behavioural advertising, so there is no opt-out for you to exercise. To make any other request, contact us using the details below.
If you have any questions about this Privacy Policy, want to exercise your rights, or have concerns about how we handle your data, please contact us.
We use cookies to improve your experience and analyze site traffic with Google Analytics and Microsoft Clarity. For details, see our cookie policy.