Privacy Policy
This policy explains how personal data is handled on the SharedLinks365 marketing website and in Early Access requests.
Last updated: 22 August 2026
1. Controller and website operator
AGORA TECH S.r.l. develops and operates SharedLinks365 and is the data controller for personal data processed through this marketing website.
Registered office: Via Borfuro 7, 24122 Bergamo (BG), Italy. VAT number: IT-04202550168. Privacy and legal contact: privacy@agoratech.eu. No Data Protection Officer has been appointed. Company Register/REA: BG-444019.
2. Data we process and why
| Data and purpose | Legal basis |
|---|---|
| IP address, request time, URL, user agent, security events and technical server logs used to operate, secure and troubleshoot the site. | Legitimate interests in service operation and security (GDPR Art. 6(1)(f)); legal obligation where applicable. |
| Cookie choice, consent timestamp, masked IP/country and consent-session identifier recorded by SureCookie to administer and demonstrate visitor choices. | Legitimate interests and, where applicable, compliance with legal obligations (Arts. 6(1)(f) and 6(1)(c)). |
| GA4 and Site Kit analytics data, deployed through Google Tag Manager, used to understand aggregate site usage and performance. | Consent (Art. 6(1)(a)). Analytics storage is denied by default for applicable European visitors until consent is given. |
| Name, business email, company, role, tenant context and information voluntarily submitted in a Company or MSP Early Access form. | Steps requested before a possible contract (Art. 6(1)(b)) and legitimate interests in evaluating the request (Art. 6(1)(f)). |
| Optional product news or marketing communications. | Consent (Art. 6(1)(a)). Marketing consent is separate from submitting an Early Access request. |
3. Cookies and consent
Necessary technologies support site and consent operation. Analytics, functional and marketing technologies are non-essential and remain disabled unless the relevant consent is given. You can reject non-essential technologies, change your categories, or withdraw consent at any time using “Cookie Preferences”. Withdrawal does not affect processing that was lawful before withdrawal. See the Cookie Policy.
4. Services and recipients
The marketing website is hosted on Microsoft Azure. Personal data may also be processed by security providers; Google services including Site Kit, Tag Manager and Analytics where consented; SureCookie for consent management; and Brevo for Early Access forms, double opt-in and strictly related transactional messages. These providers act under their own terms and, where applicable, data-processing arrangements.
Data is not sold. It may be disclosed to professional advisers or authorities when required by law, or to suppliers that support the stated purposes under appropriate safeguards.
5. International transfers
Some suppliers may process data outside the European Economic Area. Where this occurs, AGORA TECH will rely on an applicable adequacy decision or appropriate safeguards such as the European Commission’s Standard Contractual Clauses, together with supplementary measures where required.
6. Retention
Technical IIS and security logs generated through the Microsoft Azure hosting environment are retained for up to 12 months, except where a documented extension is necessary for incident management, legal obligations, or litigation. SureCookie consent logs are configured for up to 365 days. In the connected GA4 property, event data and user data are both configured for the maximum 14-month retention available to the standard property, with user-data retention reset upon new activity. Early Access submissions that do not progress to a pilot or contractual relationship are retained for up to 24 months from the last meaningful interaction and deleted or anonymised earlier when no longer necessary. Where a pilot or contractual relationship proceeds, relevant records are retained for the duration of that relationship and afterwards only as required for applicable legal, contractual, accounting, or claims-management obligations. Marketing data is retained until withdrawal or earlier deletion where no longer necessary.
7. Your GDPR rights
Subject to the GDPR and applicable conditions, you may request access, rectification, erasure, restriction, portability, or objection, and may withdraw consent at any time. You also have the right to lodge a complaint with the competent supervisory authority. In Italy this is the Garante per la protezione dei dati personali.
8. Product and tenant data
This policy covers the public marketing website and Early Access requests. Any processing of Microsoft 365 tenant data during a pilot or commercial service will require separate contractual, technical and privacy documentation allocating controller and processor responsibilities. This website does not claim product compliance with GDPR, NIS2, ISO standards, or any other framework.
9. Changes
We will update this policy when corporate details, suppliers, retention periods, or processing activities change. Material changes that affect consent will be reflected in the cookie banner and may require a renewed choice.