Privacy Policy

Who we are

Optakt Labs OÜ is an Estonian company (registry code 16930992, VAT EE102380068) that builds AI agent infrastructure. Our website is optakt.io. You can reach us at max@optakt.io.

What this policy covers

This policy explains what personal data we collect, why, and what rights you have. It applies to our website, our AI agent platform, and any integrations (Microsoft 365, Telegram, email) that connect to our services on your behalf.

Data we collect

Website visitors

We do not use cookies, analytics, or tracking on optakt.io. If you join our waitlist, we store your email address to contact you about availability.

Platform users

When you use the Optakt platform, we process the data necessary to operate your AI agent. This includes:

• Account information (name, email address)
• Conversation content between you and your agent
• Memory blocks and archive entries your agent creates
• Integration data you authorize (calendar events, emails, contacts)

Third-party integrations

When you connect services like Microsoft 365, we access only the data scopes you explicitly authorize (for example, calendar read access or email read access). We do not access data beyond the permissions you grant. Integration tokens are stored encrypted on your dedicated server instance.

Why we process your data

We process personal data for these purposes:

• Operating your AI agent (contract performance, GDPR Art. 6(1)(b))
• Responding to your inquiries (legitimate interest, GDPR Art. 6(1)(f))
• Sending waitlist notifications (consent, GDPR Art. 6(1)(a))

Where your data lives

Each Optakt deployment runs on a dedicated server instance. Your data is not shared across customers. Platform data is stored on AWS infrastructure in the EU (Frankfurt, eu-central-1) unless you request a different region.

Conversation content is sent to language model providers (Anthropic, Google, OpenAI, or others you configure) for AI processing. These providers process data under their own privacy policies and do not use your data for training.

Data retention

We retain your data for as long as your account is active. Conversation history and agent memory persist to provide continuity — that is the core function of the platform. You can request deletion of your data at any time.

Your rights

Under the GDPR and applicable US state privacy laws, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to or restrict processing
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, email max@optakt.io. We will respond within 30 days.

Data sharing

We do not sell your data. We share data only with:

• Language model providers, to process your conversations
• Infrastructure providers (AWS), to host your server instance
• Integration providers (Microsoft, Telegram), only as you authorize

We do not share data with advertisers, data brokers, or any other third parties.

Security

Data is encrypted in transit (TLS) and at rest. Each customer runs on an isolated server instance — there is no multi-tenant database. Integration tokens are stored encrypted. Access to third-party services is mediated through dedicated connector services.

Children

Our services are not directed at anyone under 16. We do not knowingly collect data from children.

Changes to this policy

We may update this policy. Material changes will be communicated via email to active users. The “last updated” date at the top reflects the most recent revision.

Contact

Optakt Labs OÜ
Registry code: 16930992
Email: max@optakt.io

If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local supervisory authority.