Privacy Policy

Last updated: September 17, 2026

1. Introduction

SupaAgent ("us", "we", or "our") operates the SupaAgent website and application (the "Service"). SupaAgent is a product of iCONX Solutions Inc., based in Ontario, Canada. iCONX Solutions Inc. is the data controller for personal data processed through the Service. This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service.

2. Information We Collect

We collect the following categories of information to provide and improve the Service:

  • Account data — email address, first and last name, phone number, and workspace or business details you provide.
  • Conversation content — transcripts of chat, SMS, voice, and video-avatar conversations handled by your agents, including messages exchanged with your customers.
  • Call recordings — audio recordings of voice calls, where recording is enabled.
  • Customer records — contact details and interaction history your agents create or update on your behalf.
  • Agent memory — facts and preferences your agent retains across conversations in order to personalise future responses.
  • Connected account credentials — OAuth access and refresh tokens for third-party services you choose to connect (Gmail, Google Calendar, Google Drive, Microsoft Outlook, iCloud). Tokens are stored so the agent can act on your behalf, and are revoked when you disconnect the integration.
  • Knowledge base content — documents, files, and website content you upload or link for your agent to reference.
  • Usage data — cookies, analytics, and service usage counters (conversations, voice minutes, messages) used for billing and plan limits.
  • Billing data — subscription and payment records. Card details are handled by our payment processor, Stripe, and are never stored on our systems.

3. Use of Data

iCONX Solutions Inc. uses the collected data for the following purposes:

  • To provide and maintain the Service, including operating your AI agents across chat, voice, SMS, and video channels
  • To personalise your agent's responses using your profile, knowledge base, and agent memory
  • To measure usage against your plan's limits and to bill your subscription
  • To notify you about changes to our Service
  • To provide customer care and support
  • To monitor and improve the reliability and quality of the Service

We do not sell your personal data, and we do not use your private data or your customers' conversation content to train publicly available AI models.

4. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases:

  • Performance of a contract — to deliver the Service you have subscribed to, including operating your agents and processing conversations.
  • Consent — for connecting third-party accounts such as Gmail, Calendar, or Drive, and for optional analytics cookies. You may withdraw consent at any time by disconnecting the integration or adjusting your cookie preferences.
  • Legitimate interests — to secure, monitor, and improve the Service, and to prevent abuse, where those interests are not overridden by your rights.
  • Legal obligation — to retain billing and tax records as required by applicable law.

5. Data Retention

We retain personal data for as long as your account remains active and for as long as necessary to provide the Service. When you close your account or request erasure, we delete or irreversibly anonymise your personal data within 30 days, except where we are required to retain certain records — such as billing and tax records — to comply with legal obligations. Backups are purged on their normal rotation schedule.

6. Your Rights Under GDPR

If you are located in the European Economic Area or the United Kingdom, you have the following rights over your personal data:

  • Access — to obtain a copy of the personal data we hold about you.
  • Rectification — to have inaccurate or incomplete data corrected.
  • Erasure — to have your personal data deleted (the "right to be forgotten").
  • Restriction — to limit how we process your data in certain circumstances.
  • Portability — to receive your data in a structured, commonly used, machine-readable format.
  • Objection — to object to processing carried out on the basis of our legitimate interests.
  • Withdraw consent — at any time, where processing is based on consent.

To exercise any of these rights, contact us at info@supaagent.com. We respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.

7. Transfer of Data

Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, or country, where data protection laws may differ from those in your jurisdiction. Our infrastructure is hosted in Canada. If you are located outside Canada and choose to provide information to us, please note that we transfer the data, including personal data, to Canada and process it there.

8. Security of Data

We protect your data in transit and at rest using industry-standard encryption, and each workspace's data is isolated from every other workspace. Access to production systems is restricted to authorised personnel. No method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

9. Data Deletion

You have the right to request the deletion of your personal data held by SupaAgent. You can request deletion in either of these ways:

  • From within the app, under Account → Security → Delete Account.
  • By emailing info@supaagent.com with the subject line "Data Deletion Request", including your registered email address and any specific account details you wish removed.

Requesting deletion immediately revokes access to your account. We complete deletion of your personal data and confirm to you within 30 days, except for records we are legally required to retain.

10. Contact Us

iCONX Solutions Inc. is the data controller for personal data processed through the Service. If you have any questions about this Privacy Policy or wish to exercise any of your rights, please contact us at info@supaagent.com.

SupaAgent — AI agents for chat, voice, phone, SMS and code