AgentOK
Privacy policy
In force from 13 November 2026. We explain which personal data we process, why, and what rights you have (GDPR).
1. Controller
The controller is Bagpack s.r.o.. For questions about personal data write to hello@agentok.cz. We have no data protection officer.
2. What data, why, and on what basis
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| Address of the store you checked and the report from its public pages | Providing the check, showing the report by link | Contract (Art. 6(1)(b)) | 730 days, then deleted |
| A scrambled one-way fingerprint of your network address (not the address) | Counting free checks and preventing abuse | Legitimate interest (Art. 6(1)(f)) | A few days |
| Account: e-mail, language, alert settings, messages you send us and the history of your reports | Sign-in, customer account, support | Contract | Until you delete the account (Settings); messages and reports go with it |
| Telegram: user number, username, language, watched stores, Pro status | Running the bot, watching and Pro | Contract | While you use the service, earlier on request |
| Invoice details you enter (name or company, address, country, company number, VAT number, e-mail) and the VIES check result | Correct billing and VAT, sending the invoice | Contract and legal obligation (Art. 6(1)(c)) | Accounting and tax records 10 years by law |
| Payment: amount, date, Telegram (Stars) or Revolut (card) reference, order status | Processing the payment, accounting, complaints | Contract, legal obligation | 10 years |
| Technical error records (without the content of your messages) | Security and fixing faults | Legitimate interest | At most 90 days |
We never see or store your card number: the payment happens on Revolut's page. Giving the data needed for the check and the payment is a condition of the contract; without it we cannot provide the service. Invoice details are voluntary, but without them we cannot issue an invoice to your company.
3. Uploaded logs
We read an uploaded web server log in memory, add it up and throw it away. We do not store the file, its lines or the visitors' network addresses, and the addresses are not examined. The result is shown once and is not saved.
4. Who receives data
- Telegram (the platform the bot runs on and which takes Stars payments). Telegram is a separate controller and its servers may be outside the EU.
- Revolut (card payment processing).
- Hosting (servers in Europe) and our accountant and accounting software (Pohoda) to issue documents.
- VIES (European Commission): checking EU VAT numbers of businesses.
- Public authorities where the law requires it.
We do not sell data and do not use it for advertising. We use no third-party tracking scripts and no advertising or analytics cookies. We store only the one necessary cookie with your language choice.
5. Automated decisions
The store score is produced automatically, but it has no legal or similarly significant effect on a person.
6. Your rights
You have the right of access, rectification, erasure, restriction, portability, and the right to object to processing based on legitimate interest. If you gave consent you can withdraw it at any time. Send your request to the contact above; we reply within 30 days. We cannot erase data we must keep by law (accounting records). You can have a report link deleted: send us the link.
You also have the right to complain to the Czech Office for Personal Data Protection (Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz) or to the authority in your own country.
7. Reports and security
A report can be opened by anyone who has its link. The link is long and random, and reports are hidden from search engines. Transfers are encrypted (HTTPS). Access to the admin area is protected.
8. Changes
We may update this policy and will publish the new version here.