Privacy Policy

Effective date: June 20, 2026 Last updated: June 20, 2026

This Privacy Policy explains how Agentic Commerce OÜ ("Acom," "we," "us," or "our") collects, uses, and shares information when you visit our website at https://getacom.ai or use our services (together, the "Service"). It also explains the choices and rights you have regarding your information.

If you have questions, contact us at hello@getacom.ai.

Who we are

Acom helps ecommerce stores become visible and transactable by AI agents. We provide software to merchants and work with data about their stores, products, and customers in order to deliver that service.

For data we collect about visitors to our website and account holders, Acom is the controller. For data that our merchant customers send us about their own stores and end customers, the merchant is the controller and Acom acts as a processor under their instructions. The terms governing that relationship are set out in our Data Processing Agreement, available on request.

Information we collect

Information you give us. When you join a waitlist, request a demo, create an account, or contact us, we collect details such as your name, email address, company name, role, and anything you include in your message. If you become a paying customer, we (or our payment processor) collect billing information.

Merchant and store data. To provide the Service, we process data our customers connect or upload, which may include product catalogs, store metadata, order and transaction information, and related customer data. We handle this data on the customer's behalf and under the agreement we have with them.

Information we collect automatically. When you use our website or Service, we collect technical data such as IP address, browser type, device information, pages viewed, referring URLs, and timestamps. We collect some of this through cookies and similar technologies. See our Cookie Policy for details.

Information from third parties. We may receive information from analytics providers, payment processors, and integration partners that you connect to your account.

How we use information

We use information to:

  • Provide, operate, and improve the Service.
  • Create and manage accounts and respond to requests.
  • Process payments and send billing and account notices.
  • Communicate about updates, security, and (where permitted) marketing. You can opt out of marketing at any time.
  • Monitor usage, maintain security, and prevent fraud or abuse.
  • Meet legal, tax, and accounting obligations.

Our legal bases for processing under GDPR are: performance of a contract, your consent (for example, marketing and non-essential cookies), our legitimate interests in running and securing the business, and compliance with legal obligations.

How we share information

We do not sell your personal information. We share information only with:

  • Service providers who work on our behalf, such as hosting, analytics, email delivery, and payment processing. They may use the data only to provide services to us.
  • Integration partners you choose to connect, and AI agents or platforms through which your products become transactable, where that is the purpose of the Service.
  • Legal and safety recipients when required by law, to enforce our agreements, or to protect our rights, users, or the public.
  • Business transfers, if we are involved in a merger, acquisition, or sale of assets, in which case we will notify you.

International transfers

We may process and store information in countries other than where you live, including the United States. Where we transfer personal data out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards such as Standard Contractual Clauses.

Data retention

We keep personal information only as long as needed for the purposes described here, to comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymize it.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact hello@getacom.ai. We will respond within the timeframe required by law.

For EU/UK residents (GDPR): You also have the right to lodge a complaint with your local data protection authority.

For California residents (CCPA/CPRA): You have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of any sale or sharing of personal information. We do not sell personal information. We will not discriminate against you for exercising these rights.

Security

We use reasonable technical and organizational measures to protect personal information. No system is completely secure, so we cannot guarantee absolute security.

Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information.

Changes to this policy

We may update this policy from time to time. We will post the new version here with an updated date and, for significant changes, give notice through the Service or by email.

Contact

Agentic Commerce OÜ Regati pst 5, Tallinn, Estonia hello@getacom.ai