Privacy policy

1. Scope and responsibility

This policy covers the Agentfleet application, its connected business accounts and this public information website. Agentfleet is used by authorised operators and software agents for Niddynoddy’s business activities; it does not offer public user registration.

byteslocal is responsible for operating Agentfleet and handling privacy requests concerning it. For information we process on Niddynoddy’s behalf, including store customer information, Niddynoddy determines the underlying business purposes. We coordinate relevant requests with Niddynoddy. This policy does not replace the shop’s privacy notice or the policies of Meta, Google, Shopify or other connected services.

2. Information we process

The information available to Agentfleet depends on the connected services, permissions granted and tasks requested by authorised operators.

• Meta / Facebook / Instagram business data: advertising account and Page identifiers, account names and settings, campaigns, ad sets, ads, creative text and images, targeting settings, budgets, delivery status and advertising performance such as impressions, clicks, reach and spend. Authorisation tokens allow the application to access the connected business assets.
• Google Ads data: advertising account details, campaigns, budgets, ad groups, keywords, ads and performance reports when that integration is enabled.
• Shopify data: products, inventory, discounts and store content; and, where accessed for a task, customer identifiers, names, email addresses, phone numbers, marketing-consent status, customer notes and tags, order details and purchase totals. The current integration does not retrieve payment-card numbers or security codes.
• Operational information: instructions, conversations, agent workspaces, proposed changes, approval or rejection decisions, timestamps, execution results and error information. Approval records and messages can contain the business or personal information included in a proposed action. Discord approval messages may identify the reviewer.
• Website and support information: network information needed to deliver this page, such as an IP address and browser request details, and information you include when contacting us.

Business data comes from the authorised connected platforms; instructions and support information come from our operators or from you. This public website has no advertising pixels, analytics scripts, sign-in form or application cookies.

3. Purposes and legal bases

We use information to analyse marketing performance, prepare content and recommendations, manage store information, carry out approved business actions, maintain a record of decisions, troubleshoot the application and respond to privacy or support requests.

Where data-protection law applies, we rely on the relevant legal basis for each activity: legitimate interests in operating and securing the business tools and evaluating marketing performance; performance of an applicable contract; compliance with legal obligations; or consent where required. Authorising a platform connection does not by itself establish consent for every use of personal data. Processing on Niddynoddy’s behalf follows its instructions and the basis applicable to that activity.

AI agents can read connected data and propose actions. Changes to connected platforms, including uploads, drafts and advertising spend, require human approval before execution.

4. Who receives information

Information is available to authorised operators and the providers involved in running the application:

• Meta, Google and Shopify receive requests and information needed for their respective integrations.
• Hosting and infrastructure providers store or process application data.
• AI model providers configured for our agents may process instructions, selected business data, tool results and conversation context. These can include the personal information described above when it is included in a task.
• When Discord approval notifications are enabled, proposed-action details and approval messages are processed by Discord and visible to people with access to the designated channel.

We may also disclose information where required by law or necessary to address security incidents or legal claims. Agentfleet is not a service for selling personal information.

Providers may process information outside your country, including in the United States. The protections and transfer arrangements depend on the provider and service involved. Contact us for information about the providers handling your data and applicable transfer safeguards.

5. Storage, security and retention

The application stores approval requests, their arguments, decisions and execution results. Information can also remain in agent conversations and workspaces, operational records and Discord messages. Credentials are held in server-side configuration, and the public policy website is separate from the application’s private data stores.

Retention depends on whether a connection or task remains active, the need to review business decisions, unresolved support or security matters, and applicable legal recordkeeping requirements. Approval and agent records do not automatically expire in the current application; removal is handled by an administrator. We assess information covered by a deletion request against these purposes and remove it when it is no longer needed, subject to applicable exceptions.

Revoking a platform connection prevents further authorised access through that connection but does not automatically erase information already stored. Platform providers may retain their own copies under their policies.

6. Request data deletion or disconnect an account

1. Email contact@byteslocal.com with the subject “Niddynoddy Agentfleet data deletion”.
2. Identify the connected account, business asset or store record concerned, and tell us which information you want removed. Do not send passwords, access tokens or payment-card details.
3. We may request limited information to verify your identity or authority. We will review the request, remove relevant information under our control where required, and explain any information that must be retained and why.

You can also revoke Agentfleet’s access through the relevant platform’s account or business-integration settings, or ask us to disconnect it. For Meta, use the Facebook or Meta business settings for the connected integration and its asset permissions. Disconnecting Agentfleet does not delete your original Facebook, Instagram, Google Ads or Shopify account or its content.

Deletion requests are handled manually. We respond within the applicable legal period, generally one month for requests under the GDPR, and explain any permitted extension.

7. Your rights

Depending on the law that applies, you may request access to, correction or deletion of your personal data, restriction of processing, or a portable copy. You may object to processing based on legitimate interests, including direct marketing, and withdraw consent where processing relies on it.

Contact contact@byteslocal.com to exercise these rights. You may also complain to your local data-protection authority. In Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD).

8. Changes to this policy

We update this page when the application or its data-handling practices change. The date at the top identifies the latest revision. Questions about this policy can be sent to contact@byteslocal.com.