Privacy & Security Policy
Policy Version: v2.0-2026-10Hosting Boundary: United States (AWS / Neon US-East, Multi-AZ)Incident Notice: 72 hours
1. Processor vs. Controller Role Clarity
This Privacy & Security Policy sets forth how Agents 360 AI LLC, its operators, licensors, and affiliates ("Agents 360 AI LLC", "we", "us", or "Platform Operator") ("LogiStock", "we", or "Platform Operator") collects, processes, and safeguards information in connection with the LogiStock enterprise software-as-a-service platform.
- Customer Data (LogiStock as Data Processor): For all inventory records, transactional entries, catalog items, supplier lists, customer contacts, invoices, warehouse stock valuations, and operational content entered or uploaded by or on behalf of subscribers ("Customer Data"), the Customer is the Data Controller and LogiStock acts strictly as a Data Processor.
- Administrative Account Data (LogiStock as Data Controller): LogiStock acts as a Data Controller solely for account administration, billing details, identity verification, security monitoring, telemetry logs, service notifications, and compliance with legal and statutory obligations.
2. Security & Administrative Safeguards
LogiStock implements defense-in-depth organizational and technical measures designed to protect Customer Data against unauthorized access, destruction, loss, or alteration:
Cryptographic isolation enforced directly at the database engine level via PostgreSQL RLS policies keyed to the tenant UUID.
Granular role permissions (ADMIN, MANAGER, OPERATOR, CONTADOR) ensuring users only access authorized modules and warehouses.
Native TOTP authenticator integration with consumable one-time recovery codes to eliminate credential credential-stuffing risks.
All data in transit is encrypted using modern TLS 1.3/HTTPS; all databases and object buckets are encrypted at rest with AES-256.
Centralized audit trail recording authentication attempts, privilege elevations, legal terms acceptance, and sensitive entity mutations.
Continuous dependency scanning, automated vulnerability audits, and proactive zero-day patch deployments.
3. 72-Hour Security Incident Notification Commitment
"LogiStock shall notify the Customer's designated security or administrative contacts in writing within seventy-two (72) hours of confirming a Security Incident involving unauthorized access to, disclosure of, alteration of, loss of, or exfiltration of Customer Data. Such notice will include, to the extent known, the nature of the incident, affected systems/data categories, potential impact, mitigation measures, and remediation status."
Customer security personnel can register or update emergency incident contacts in the tenant settings console or by emailing security@agents360ai.com.
4. Customer Data Ownership
"All Customer Data remains the sole property of the Customer. LogiStock acquires no ownership rights in Customer Data and processes such data solely for the purpose of providing the Services and fulfilling contractual obligations."
LogiStock never sells, rents, monetizes, or uses Customer Data to train publicly accessible machine learning models without express written authorization.
5. Subprocessor Obligations & Cloud Infrastructure
LogiStock utilizes third-party infrastructure providers (subprocessors) to deliver cloud hosting, managed databases, email dispatch, and AI processing. All third-party subprocessors are contractually bound to industry-standard security controls, data confidentiality covenants, and operate strictly under LogiStock's instructions and applicable data protection legislation.
| Subprocessor | Service Role | Location & Jurisdiction |
|---|---|---|
| Amazon Web Services (AWS) / Neon | Primary Relational Database & Encrypted Storage | United States (AWS / Neon US-East, Multi-AZ) |
| Google Cloud (Vertex AI) | Secure LLM Processing for LogiStock Copilot | United States (us-central1 / us-east4) |
| Composio Gateway | OAuth Token Facilitation (Calendar & Email Sync) | United States |
| Cloudflare / Edge CDN | DDoS Protection, Edge Routing & WAF Filtering | Global Edge Points of Presence |
| Resend / SendGrid | Transactional Email & Security Alerts | United States |
6. Business Continuity & Data Protection
LogiStock maintains comprehensive business continuity and disaster recovery (BC/DR) protocols to guarantee high availability and resilience:
- Encrypted Automated Backups: Point-in-time recovery (PITR) transactional logs and daily full encrypted database snapshots replicated across multiple availability zones.
- Multi-AZ Infrastructure Redundancy: Hosted across redundant data centers within AWS / Neon US-East, preventing single-point hardware failure.
- Disaster Recovery (DR) Objectives: Target Recovery Point Objective (RPO) of ≤ 1 hour and Recovery Time Objective (RTO) of ≤ 4 hours for catastrophic database failover.
7. Data Subject Rights & Privacy Routing
Applicable data protection laws (including GDPR, CCPA, and CPRA) grant individuals rights regarding their personal data, including rights of access, rectification, erasure, and portability. Requests are routed as follows:
Requests concerning billing, account administrator identities, or LogiStock corporate contacts must be sent directly to our Data Protection Officer at legal@agents360ai.com.
Inquiries, deletion requests, or subject access requests (SARs) regarding customer records or warehouse personnel stored within a customer's workspace must be directed to the respective Customer acting as Data Controller. LogiStock will promptly notify and redirect inquiring parties to the subscriber organization.
8. Policy Versioning & Updates
LogiStock reviews this Privacy & Security Policy periodically to reflect technological advancements, new features, and evolving regulatory standards. Material updates will be published within the centralized Legal Hub with updated version timestamps.
When material updates are promulgated, the Session Guard interceptor will trigger an in-app prompt requiring tenant administrators to re-confirm acceptance upon their next login session before accessing dashboard operations.
Direct Privacy Contact: legal@agents360ai.com
Security Emergency: security@agents360ai.com