Privacy
Last updated 1 October 2026
This page describes what salesagents.si and the MCP server at mcp.salesagents.si collect, why, and what you can do about it. It describes the service as it behaves, not a generic template.
Who is responsible
Innovate d.o.o., a company registered in Slovenia, is the data controller. SalesAgents is a service operated by Innovate. Write to bruno@innovate.si about anything on this page, including any request under Your rights.
What we collect
Connecting the MCP server
When you connect mcp.salesagents.si to your agent, we ask for your email address and send you a sign-in link. We keep that address and the access token issued to your agent, so the connection keeps working. The lawful basis is Article 6(1)(b) GDPR, the service you asked for, and Article 6(1)(f), our legitimate interest in knowing who uses the service and following up on it.
Your profile
The setup interview stores your profile: company and brand names, signatures, the people and roles you list, voice rules, working languages, ideal customer description, pipeline stages, offerings, links and which tools you use. This is configuration that makes the playbooks yours. You can read, change, export or delete it at any time. Lawful basis: Article 6(1)(b).
What we do not collect
Your agent does the work with its own connectors. We do not receive or store your CRM records, emails, calendar entries, files, meeting recordings or transcripts, and we never ask for the passwords or tokens of your Google, Microsoft, LinkedIn or CRM accounts. Tool arguments are processed in memory to produce the next instruction and are not logged.
If you use a feature that produces a report page (for example the account research brief), the finished report is stored at an unlisted address for seven days and then deleted. It opens only with the access code your agent prints, and your agent can ask for it inline instead.
Website forms
If you ask for the install line by email, request access or sign up for the newsletter, we receive the fields you send. Install-line and access requests are delivered to our mailbox; newsletter addresses are kept in our mailing provider's list until you unsubscribe. Lawful basis: Article 6(1)(b) for requests, consent (Article 6(1)(a)) for the newsletter.
Analytics
The site can use Google Analytics 4 to count visits. It sets cookies only after you say yes on the banner; without consent it runs in cookieless mode. There is no advertising pixel.
Anonymous counts
Separately, and whether or not you accept the banner, the site counts page views and a few actions (copying the install line, clicking a call to action, the forms) on mcp.salesagents.si, together with a coarse label for where the visit came from, such as "linkedin", "google" or "direct". No cookie is set, no identifier is created and your IP address is not stored; to stop floods, a one-way hash of it and the current minute is held for sixty seconds. What remains are daily totals that cannot be tied to you. Lawful basis: Article 6(1)(f). The counters are deleted after 90 days.
Server logs
Our host records the usual request data (IP address, time, path, user agent) for security and operation. Lawful basis: Article 6(1)(f).
Who else processes your data
| Who | What for | Where |
|---|---|---|
| Cloudflare | Hosting the site, serving the MCP endpoint, storing sign-in tokens and profiles | Global edge network |
| Resend | Sign-in links, form mail, the newsletter | United States |
| Google Analytics | Visit statistics, only if configured and consented | United States |
Transfers outside the European Economic Area rely on the European Commission's Standard Contractual Clauses and the safeguards those providers publish. Third-party services you connect to your own agent (your mail, CRM, LinkedIn provider or recorder) are your own processors, under your agreements with them.
How long we keep it
- Sign-in address, tokens and profile: until you disconnect and ask us to delete them.
- Report pages: seven days.
- Form requests: as business correspondence, unless you ask us to delete them.
- Newsletter: until you unsubscribe.
- Anonymous counters: 90 days.
Your rights
Under the GDPR you may ask for a copy of your data, to correct it, to delete it, to restrict or object to its use, and to receive it in a portable form. Where we rely on consent, you may withdraw it at any time. Write to bruno@innovate.si; one email is enough.
You can complain to the Slovenian Information Commissioner (Informacijski pooblaščenec), or to the supervisory authority where you live.
Automated decisions
Briefings, grades and drafts are produced automatically to help you work. None of them is a decision with legal effect on you, and nothing is sent to anyone without your explicit approval.
Changes
If we change what we collect, we change this page and the date at the top.