Ducas AI Agents emblem DUCAS AI AGENTS Systems that never sleep. ← Back to site

Legal

Privacy Policy

Last updated: September 29, 2026

Ducas AI Agents ("Ducas AI Agents," "we," "us," or "our") provides AI agents and automation services to businesses, operated as part of Ducas Enterprises. This Privacy Policy explains what information we collect, how we use it, and the choices you have, whether you are visiting our website, requesting a free audit, talking with one of our AI agents, or working with us as a client.

1. Information we collect

We collect information in a few different ways, depending on how you interact with us:

Information you give us directly

  • Free automation audit form: your work email, business name, full name, and a description of the problem you want help with.
  • Conversations with our AI agents: messages you send through Telegram, WhatsApp, our website chat preview, or any other channel where one of our agents (such as Sócrates or a specialist agent) responds to you, including the content of those messages.
  • Client onboarding and support: any additional information you share with us by email, phone, or during a consultation, such as details about your business, goals, or existing tools.

Information from connected accounts

If you are a client and choose to connect a Google account (Gmail, Drive, or Calendar) so that your agent can send emails, manage files, or schedule events on your behalf, we access only the specific data needed to perform the actions you authorize, and only for as long as that connection stays active. We do not connect to your accounts unless you have explicitly authorized it.

Information collected automatically

Like most websites, our site may collect basic technical information (such as browser type, device type, and general usage patterns) to keep the site working correctly and to understand how it is used.

2. How we use information

We use the information we collect to:

  • Respond to audit requests and follow up with prospective clients;
  • Provide, operate, and improve our AI agents and the services built around them;
  • Send messages, emails, or notifications you have requested or that relate to services you use;
  • Maintain the security, integrity, and proper functioning of our systems;
  • Comply with legal obligations and enforce our agreements.

We do not sell your personal information, and we do not use client conversation data to train third-party AI models beyond what those providers' own terms require for basic service operation (see Section 3).

3. AI and data processing subprocessors

Our agents are built on top of third-party AI and infrastructure providers, who process data on our behalf as subprocessors under their own security and privacy commitments. These currently include:

  • Anthropic (Claude): powers the reasoning and conversation of Sócrates and our specialist agents.
  • OpenAI: used for certain content and automation tasks.
  • ElevenLabs: provides voice generation and text-to-speech for agents that use a voice interface. See Section 4 for how we handle voice data specifically.
  • Google Workspace APIs: used only for clients who explicitly connect a Google account, to read or write the specific data needed for the actions you authorize (email, calendar, or file operations).
  • Higgsfield: used to generate promotional images and video content for our own marketing and, where applicable, for client-facing creative work.

We may add or change subprocessors as our services evolve. Any subprocessor we use is contractually required to protect data at least as strictly as this policy describes.

4. Voice and biometric data

Some of our agents use voice generation or voice interaction features powered by ElevenLabs. If a feature involves creating a synthetic voice based on a recording (for example, to build a custom voice for a client's agent), we treat that recording, and any voiceprint or biometric identifier derived from it, with additional care:

  • We only create or use a synthetic voice with the explicit consent of the person whose voice is being used;
  • We do not sell, lease, or trade voice recordings or voiceprints;
  • We retain voice data only for as long as needed to provide the service, or as otherwise agreed with the client;
  • We will honor a request to delete a stored voice sample or voiceprint, subject to any technical or contractual limitations from our voice provider.

This section is intended to address biometric privacy laws such as Illinois' Biometric Information Privacy Act (BIPA) and similar laws in other states. Because voice and biometric data carry specific legal requirements that vary by state, we will always ask for your explicit consent before creating or storing any voice model based on a real person.

5. Data retention

We keep personal information for as long as reasonably necessary to provide our services, respond to inquiries, comply with legal obligations, and resolve disputes. When information is no longer needed for these purposes, we take reasonable steps to delete or de-identify it.

6. How we share information

We do not sell personal information. We may share information with:

  • The subprocessors listed in Section 3, solely to provide our services;
  • Professional advisors (such as accountants or legal counsel), under confidentiality obligations;
  • Law enforcement or regulators, only where required by law or to protect our rights, users, or the public.

7. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, and to opt out of certain uses. This can include rights under laws such as the California Consumer Privacy Act (CCPA/CPRA), and similar laws in states including Virginia, Colorado, Connecticut, and Utah. To exercise any of these rights, contact us using the details in Section 11 and we will respond within the time required by applicable law.

8. Data security

We use reasonable technical and organizational measures to protect the information we hold, including access controls, encrypted secrets management, and monitoring of our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children's privacy

Our services are directed at businesses and are not intended for individuals under 18. We do not knowingly collect personal information from children.

10. International users and data transfers

Ducas AI Agents operates in the United States, and the subprocessors described in Section 3 may process data on servers located outside your country of residence. By using our services, you understand that your information may be processed in the United States and other countries where our subprocessors operate.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above when we do, and material changes will be communicated to active clients directly.

12. Contact us

If you have questions about this Privacy Policy or want to exercise a privacy right described above, contact us at ducasenterprises2025@gmail.com or +1 (321) 945-4124.

Chat on WhatsApp