Who is responsible
The controller is Arseniy Baskakov B.V., Markt 4 B, 7551 CG Hengelo, Netherlands, registered with the Dutch Chamber of Commerce under 96840730.
Privacy questions and requests go to info@argentumfield.com. You may also lodge a complaint with a data protection authority, in particular in the EU country where you live or work or where you believe the infringement took place. In the Netherlands, where we are established, this is the Autoriteit Persoonsgegevens. In Belgium it is the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données). Germany has federal and state data protection authorities. You can find their contact details in the official directory of German supervisory authorities.
Voluntary feedback
We store the usefulness answer and optional comment you submit to improve the pilot. Your research query, saved case and account identity are not attached. A hashed network identifier limits repeated submissions and is cleared after two days; it is stored separately from feedback. Please keep comments general and leave out personal or confidential data.
What you should not send
The Field Agent is an open text field on a preview. Do not enter personal data, confidential project identifiers, export-controlled or otherwise regulated information. Describe the material, the observed problem and the decision instead.
What is processed, and why
| Data | Purpose | Legal basis | Kept |
|---|---|---|---|
| The problem text you submit, your answer to one clarifying question if you give one, and the response language | To produce the answer you asked for. It is sent to the model service and returned to you. | Legitimate interest in providing the function you requested | Not stored as a case unless you explicitly save the displayed result after sign-in |
| A one-way, deployment-keyed identifier derived from your network address, and a short-lived session cookie | To enforce the free question and its one clarification, and to stop abuse and runaway cost | Legitimate interest in security and cost control | Until the quota window expires, then deleted |
| Usage events without your text: which step of the form you reached, which template you chose, which methods were suggested, the language of the answer, how many cities matched, and whether a request was refused and why | To see where people get stuck and what they look for, without keeping what you wrote | Legitimate interest in operating and improving the service | Raw events 30 days, then daily totals only |
| Model-call accounting: token counts, cost and duration of each call, without your text | To control operating cost and keep a record of every model call | Legitimate interest in operating the service | Kept as the cost ledger. It contains no text you wrote. |
| A signed refinement value held by your browser, tied to your session cookie | To let you answer one clarifying question about the same answer | Legitimate interest in providing the function you requested | 20 minutes, in your browser |
| A request for Extended Field Agent access: your email address, what you would like to use it for, and any optional answers (how often, preferred payment model, organisation, whether you are open to a feedback conversation) | To review the request and switch the pilot on for your workspace. We are notified by email with the optional answers only; the description stays with the request. | Steps prior to a contract, at your request | 180 days after you send it, then deleted |
| An encrypted, single-use handoff containing your problem and displayed orientation snapshot | To carry that result into a workspace when you choose to | Steps prior to a contract, at your request | Usable for 15 minutes; deleted on use or during scheduled cleanup after expiry |
| Email address and the time you accepted the preview terms, with a workspace label taken from the email domain | To verify the mailbox and create a workspace. Email verification does not prove organisational affiliation. | Contract, and steps prior to a contract | Links expire after 10 minutes. Account data remains while the workspace is active or until a valid deletion request is completed. |
| A research case you explicitly save: problem, displayed method orientation, coverage plan and up to three evidence-labelled facility leads | To let you reopen or delete the result in your private workspace. It is not used for analytics, routing, pricing or model training. | Contract, and steps prior to a contract | Until you delete the case or a valid workspace deletion request is completed. |
| An Extended Field Agent plan you run on a saved case, if the pilot is switched on for your workspace | To prepare and show the plan. The case’s problem text and method directions, with public-source leads your workspace has already been shown, are sent to the model service. | Contract, and steps prior to a contract | Stored with the case and deleted with it. |
| Institutional data and official public pages about providers | To build evidence-labelled facility leads and review capability records | Legitimate interest in publishing bounded, source-backed professional information | Until corrected, suppressed or withdrawn |
Who processes it besides us
- OpenAI, United States — the model service that produces the orientation. API data is not used to train OpenAI models by default.
- Railway — application and database hosting in Railway’s Amsterdam region (EU). Railway publishes its data processing terms.
Transactional email and payment providers appear here only on a deployment where those features are switched on. Transactional email is used for one-time registration and sign-in links, and to notify us of an Extended Field Agent request; it is not proof of employment or affiliation. We do not sell data and we do not share it for advertising.
Data leaving the European Economic Area
Your problem text is sent to OpenAI and may be processed outside the European Economic Area, including in the United States. OpenAI’s data processing addendum provides for EU Standard Contractual Clauses or an applicable European Commission adequacy decision for onward transfers of EEA data. The orientation does not need personal or confidential material; do not include any.
Automated processing
The Field Agent uses an AI model to draft an orientation, and Extended Field Agent uses one to draft a longer plan for a saved case. Both are shown to you without prior human review, and neither is a decision about you. No decision producing legal or similarly significant effects is made about you by automated means. Anything routed to a provider or committed commercially is approved by a person.
Scientific data analysis is not available yet
This version has no scientific-data upload and cannot receive, store or use your scientific data. If an analysis feature opens later, its processing and deletion terms will be shown before any upload is possible.
Result files exchanged under a separately agreed case support project have their own written retention terms and are not part of that future self-service feature.
Cookies and browser storage
Only functional cookies are set: a passcode cookie on a gated deployment, a session cookie, an anonymous preview cookie, the short-lived handoff and the second-factor step. There is no analytics or advertising cookie and no third-party cookie. The usage events described above carry a random identifier that lives in the tab’s own storage and disappears when the tab closes; it is not a cookie and is never linked to an account. Your choice of light or dark theme is stored in your browser and never sent to us. While a tab stays open, the problem you are typing and the current orientation are kept in that tab’s own browser storage so that leaving the form and coming back does not lose them; that storage is cleared when the tab closes and is never read by us. Recovery is also discarded on sign-out, a change of login, or a return after 30 minutes without an update. Anonymous questions are transferred to an account only through the explicit workspace handoff. A case is stored on our side only when a signed-in workspace saves one.
Your rights
You may ask for access, rectification, erasure, restriction or portability, and you may object to processing based on legitimate interest. Because the preview stores no account for an anonymous visitor, we may be unable to identify your data from a problem you typed; tell us the approximate time and we will do what we can.
Providing the text is voluntary. Without it there is no orientation, and nothing else follows from declining.
Security
Sign-in links and session values are stored only as hashes, authenticator secrets are encrypted, and the application connects to the database as a role that cannot change the schema. The security page lists what is implemented and what is not yet.