AgentNest

GDPR overview

The letters GDPR appear nowhere on the AgentNest site, neither in the privacy policy nor in the terms. No compliance is claimed, and none is denied. The mechanics, though, are recognisable: the policy separates controller and processor roles, lists legal bases (contract performance, legitimate interests with a balancing test, consent, legal obligation) and grants access, rectification, erasure, restriction, portability, objection and withdrawal of consent, answered within 30 days after identity verification. International transfers rely on standard contractual clauses approved by data protection authorities and on frameworks including the EU-US Data Privacy Framework, and breach notification procedures are described. Minimum age is 16. Missing: no Article 27 EU representative, no data protection officer, no privacy email address, no DPA and no subprocessor list.

Who owns the data?

The terms leave intellectual property where it is: you retain ownership of any intellectual property rights that you hold in your User Content. In exchange you grant AgentNest and its partners a worldwide, royalty-free, non-exclusive licence to use, host, store, reproduce, modify, create derivative works from, publish, display and distribute that content, limited to operating, providing, promoting and improving the services and developing new ones. The licence outlives your use of the product, through backups and anonymised aggregate analytics, and feedback becomes perpetually and irrevocably usable. The privacy policy makes AgentNest controller of account data and processor of the emails and calendar events you submit, which may reach service providers, consenting business partners, group affiliates and legal authorities.

Reuse rights

You can reuse your own material freely. Nothing in the terms restricts what you do with the content you feed in, and AgentNest claims no ownership over what the assistants produce, so drafted replies, campaign sequences and messages can be sent, edited or repurposed without asking. The restrictions run the other way: you may not use AgentNest's own content without permission, nor its trademarks and logos. Copying, modifying, decompiling or reverse-engineering the service is forbidden, as is using it to build a competing product, serving third parties through it without express authorisation, or sublicensing and reselling access. The terms also warn that AI output is probabilistic: you agree to evaluate the accuracy and appropriateness of any output, including through human review if required.

Data retention & training

Hosting summary

AgentNest publishes no hosting country and no hosting region. Neither the privacy policy nor the terms name a data centre, a cloud provider or a jurisdiction in which emails, calendar events and LinkedIn content are processed. What the policy does say is that some service providers and technology partners may be located outside your jurisdiction, and that international transfers are covered by standard contractual clauses approved by data protection authorities, by provider certification under appropriate frameworks including the EU-US Data Privacy Framework, and by explicit consent where relevant, with technical measures securing data in transit and in storage. Security is described in general terms: protection against loss, unauthorised access, alteration and disclosure, access limited to employees and third parties with a need to know, and breach notification procedures. No security certification such as SOC 2, ISO 27001 or HIPAA is claimed. Data may be shared with service providers, consenting partners, group affiliates and legal authorities. Anyone with a data residency requirement should settle this point before signing up.