Providers and third-party services

Scope and responsibilities

Global Agenttic (Negocios Virtuales, S.A.), Panama, operates AgentticCRM. This page explains the services we use and distinguishes our operational providers, payment providers, and integrations an organization chooses to connect.

A subprocessor handles personal data on our behalf to deliver the service. A payment provider or integration may have its own responsibilities or act under your organization’s contract. Not every service receives the same data or is involved in every account.

See also our Privacy Policy and Terms of Service.

Payment gateways and services

We use two gateways to collect AgentticCRM subscription payments: Stripe and NMI, the latter through Credicorp Bank in Panama. The gateway and available options are shown in the subscription or payment management flow. Visa and Mastercard are the accepted card brands; they are not the gateways.

Stripe

Stripe processes card payments and provides hosted payment and subscription management pages when applicable to that contract. It receives the necessary billing and payment information; AgentticCRM keeps identifiers, payment method references, and transaction status to manage the subscription and its records.

Stripe may act as a processor for certain operations and as a controller for its own obligations, such as fraud prevention and regulatory compliance. See its Privacy Policy and Data Processing Agreement.

NMI and Credicorp Bank, Panama

NMI provides the card payment gateway through Credicorp Bank, S.A., in Panama. NMI is involved in hosted card capture and tokenization, authorization, and payment status; Credicorp Bank participates in the corresponding acquiring banking service. These are different functions within the same payment flow.

Providers receive the card, billing, and transaction data needed to process the payment. AgentticCRM keeps tokenized references, limited payment method details—such as brand and last digits—and payment and billing records. Card storage and subsequent charges depend on the contract and the authorization given.

See NMI’s Privacy Policy, its Data Processing Addendum, and Credicorp Bank’s Privacy Policy.

ACH bank transfer

We also accept ACH bank transfers in United States dollars (USD). Contact soporte@globalagenttic.com or call +507 310-9722 for instructions and to coordinate payment identification. This method is presented separately from card payments.

Returning to AgentticCRM from a payment page does not by itself confirm that a charge has completed. Subscription status and payment records are updated from the provider’s confirmation or the corresponding reconciliation.

Operational providers and subprocessors

These services are involved in AgentticCRM’s infrastructure, security, and communications. When they handle Customer Data on our behalf, their involvement falls under the subprocessor role and the applicable data processing agreement.

Hetzner Online GmbH

Hosting infrastructure for the application, database, and storage. It is involved during platform use and hosts the data and files needed to provide the service, subject to its access and protection controls. See Hetzner’s Privacy Policy.

Cloudflare

Public website hosting, content delivery, DNS, network security, and Turnstile abuse prevention. Depending on the service used, it handles network requests, IP addresses, technical security signals, and delivered content. Turnstile is involved in the forms and access flows that use it. See Cloudflare’s Privacy Policy.

Resend

Delivery of communications related to forms and service operation. It receives recipient addresses and the content needed to deliver each email when this channel is used. It does not receive Google Calendar or Meet data, AgentticVault content, WhatsApp messages, or Meta credentials. See Resend’s Privacy Policy.

Public website analytics

Google Analytics

It measures public website usage when you allow optional analytics. It handles technical information and navigation events according to that configuration. It is not used to analyze your organization’s data, Google Calendar or Meet, AgentticVault content, or WhatsApp messages. You can change your choice in the website’s analytics and chat settings.

See our Cookie Policy and Google’s Privacy Policy.

Services you choose to connect

Optional connections are involved when a person or organization authorizes and uses them. The data sent depends on the requested function, permissions granted, and contracted account. Disconnecting an integration stops new operations through that connection; it does not automatically delete records already held by the provider.

Google Calendar and Google Meet

They are involved when a personal account is connected to create or manage events and meetings requested from AgentticCRM. Data includes the connected account, tokens, attendees, dates, titles, identifiers, and necessary links. Scope and Limited Use restrictions are detailed in our Privacy Policy.

Meta and WhatsApp Business

They are involved when an organization connects its Meta Business or WhatsApp Business assets to manage messages. Data includes business identifiers, protected credentials, contacts, messages, files, and necessary delivery events. The organization retains control of its accounts and permission to communicate with its contacts. See Meta’s Privacy Policy.

Microsoft Teams and Zoom

They are involved only when the corresponding video meeting connection is configured and used. They receive account identity and the data needed to create or manage the requested meeting. Accounts, availability, and terms depend on the provider and the organization’s subscription. See Microsoft’s Privacy Statement and Zoom’s Privacy Statement.

Assistant and artificial intelligence

The platform Assistant uses the provider and model configured by the organization. Options include OpenAI, Anthropic, Google Gemini, OpenRouter, DeepSeek, GLM, Kimi, and Huawei Cloud MaaS. They are not all involved: the service selected to handle the request receives information. Data sent depends on the question, authorized sources, and the permissions of the person using the Assistant.

When an API key contracted by the organization is used, the AI provider operates under that contractual relationship; this does not make it a subprocessor contracted by Global Agenttic. The organization should review the terms, retention, and processing regions of the selected provider and model. Connecting ChatGPT or Claude also requires the person’s authorization and is subject to their account permissions.

AgentticAI and the public chat

AgentticAI is our assistant service and handles this website’s public chat when you allow it to load. We do not identify it as an independent external company. It processes what you type to answer questions about AgentticCRM. Do not send passwords, customer data, or confidential information; use your organization’s support channels for account matters.

Regions, retention, and changes

Credicorp Bank provides the stated banking service from Panama. Technology providers may process information in other countries depending on the service, account, and their own policies. A company’s headquarters location does not guarantee that all data remains in that country. Specific regional conditions should be checked in the applicable data processing agreement.

Retention depends on the data category, purpose, contract, and applicable legal obligations. Canceling a subscription or disconnecting an integration does not delete financial records that must be retained. Our Privacy Policy explains retention and individual rights.

We keep this page updated when providers or their involvement in the service change. Material changes to data processing are communicated according to the Privacy Policy and applicable agreement. For questions about a particular provider, region, or processing activity, write to soporte@globalagenttic.com.