Privacy Policy

AgenticDevelopment, operated by Veniatis, is committed to protecting your privacy. This privacy policy explains what personal data we collect, why we collect it, how long we retain it, and what rights you have. This policy applies to the website agenticdevelopment.nl.

The data controller responsible for processing your personal data is Veniatis, registered with the Dutch Chamber of Commerce. You can contact us regarding data protection matters via the contact form on this website.

We collect personal data exclusively through interactive forms on this website: Contact form: name, email address, company name (optional), phone number (optional), subject, and your message. Booking form: name, email address, company name (optional), phone number (optional), preferred date and time, subject (optional), and additional notes. For both forms, we also record your IP address and submission language for security and spam prevention purposes.

Your personal data is processed exclusively for the following purposes: • To respond to your contact form inquiry • To schedule and manage consultation bookings • To protect against spam and abuse (via Cloudflare Turnstile verification) • To comply with legal obligations We do not use your data for marketing purposes. We do not sell, rent, or share your data with third parties, unless required by law.

Our contact and booking forms use Cloudflare Turnstile to verify that submissions are made by genuine visitors, not automated bots. Turnstile operates without tracking cookies and does not collect personal data for advertising purposes. Cloudflare’s privacy policy applies to the Turnstile service: https://www.cloudflare.com/privacypolicy/.

This website does not use analytics software, tracking cookies, or marketing pixels. We do not use Google Analytics, Facebook Pixel, or any similar service. The only cookie we set is a functional language preference cookie (NEXT_LOCALE) that remembers your chosen language. This cookie does not track you and contains no personal data.

A number of our software products (including AI Gatekeeper, sshDCommander, and future tools) may transmit optional, anonymised telemetry to our servers — but only when you have explicitly opted in during installation. You may revoke this consent at any time via the settings panel of the product, after which no further telemetry is sent. Telemetry may contain the following data: • A pseudonymous installation identifier (UUID), generated server-side; this identifier cannot be directly linked to you or your device, and is never joined to your customer account or billing details. • Technical metadata about your operating system (windows, linux, macos) and CPU architecture (x86_64, aarch64). • The software product's version (e.g. "0.2.1"). • Predefined event categories from a fixed registry (e.g. "daemon-started", "tool-granted", "tool-released", "tool-killed"). No free-text fields, no user-supplied content. • Tool names as registered in the product itself (e.g. "node", "python"). No command arguments, no file paths, no working directory, no environment variables. • Aggregated technical metrics (CPU-seconds, memory usage in bytes, wall-clock-seconds) as integer values. Telemetry never contains: • Your name, email address, or any other direct identifier. • Command arguments, file contents, file paths, or working directories. • Contents of stdout, stderr, or log files. • Environment variables or secrets. • The IP address you connect from: this is irreversibly hashed (SHA-256) on receipt for rate-limiting and abuse-prevention purposes only; the hash cannot be reversed to an IP address. Purpose: product quality monitoring, bug detection, and establishing realistic resource baselines for future releases. We never use telemetry for profiling, marketing, or for decisions with legal effect. Retention periods: • Raw event records: a maximum of 90 days after receipt. • Aggregated statistics (where aggregates of fewer than 10 installations are never published): a maximum of 12 months. Legal basis: your explicit consent (GDPR Art. 6(1)(a)). On revocation, historical records remain until the end of their retention period, but no new records are received. Access or deletion requests: because the installation identifier is pseudonymous, we can only locate records when you yourself supply the installation identifier from your local product settings. Requests can be sent to the contact address listed in this declaration.

Contact form submissions are retained until your inquiry has been fully resolved, after which they are archived. Booking records are retained for a maximum of 12 months after the booking date for administrative purposes. Archived data is permanently deleted within 24 months unless a longer retention period is required by law (e.g., tax obligations).

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or misuse. These measures include encrypted data transmission (TLS), secure server infrastructure, access controls, and regular security reviews.

Under the General Data Protection Regulation (GDPR / AVG), you have the following rights: • Right of access: request a copy of the personal data we hold about you • Right to rectification: request correction of inaccurate data • Right to erasure: request deletion of your personal data • Right to restriction: request that we limit how we process your data • Right to data portability: request your data in a structured, machine-readable format • Right to object: object to the processing of your personal data • Right to withdraw consent: withdraw consent at any time where processing is based on consent To exercise any of these rights, please contact us via the contact form on this website. We will respond to your request within 30 days.

If you believe that we are processing your personal data unlawfully, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): https://www.autoriteitpersoonsgegevens.nl.