Este documento legal está disponible solo en inglés. Lee el texto en inglés a continuación.

Agent Privacy Policy

Last Updated: September 23, 2026 Effective Date: September 23, 2026

Palamo Dev Studio LLC ("Palamo," "we," "us," or "our") designs and builds Microsoft 365 Copilot agents ("agents") for business customers. This Agent Privacy Policy describes how agent data is handled when a customer installs and uses an agent we built. It does not cover the Palamo website at palamo.ai, which has its own Privacy Policy.

1. Scope

This policy applies to Microsoft 365 Copilot agents that Palamo designs and builds for a business customer ("customer" or "your organization") for installation in the customer's own Microsoft 365 tenant. It covers agents that run only on Microsoft 365 Copilot and call no service outside Microsoft 365. If Palamo ever builds an agent that does call an outside service, this policy does not cover that agent: Palamo will name the service, and the data sent to it, in the agent's description and in writing to your organization before the agent is delivered. This policy does not apply to the Palamo website or to any other Palamo product. Where your organization has a separate written agreement with Palamo covering the engagement under which an agent was built, that agreement's data-handling terms govern the build, test, and support work described in Section 7 below.

2. Key Terms

"Agent" means a Microsoft 365 Copilot agent that Palamo designs and builds for a customer.
"Customer" or "your organization" means the business that engaged Palamo to build an agent and that installs it in its own Microsoft 365 tenant.
"You" means a person using an agent as personnel of the customer organization.

3. What an Agent Is

An agent Palamo builds is a configuration package, not a hosted application. It consists of instructions that define how the agent behaves, a defined list of data sources it may draw on — for example, a specific mailbox, document library, or site — and a name and icon set. Palamo does not operate a database, back end, or hosting component for the agent. Once delivered, the agent runs entirely on Microsoft 365 Copilot, inside your organization's own Microsoft 365 tenant.

4. Where Agent Data Is Processed

Palamo operates no servers, APIs, plugins, connectors, or telemetry systems for the agents it builds. When someone in your organization uses an agent, their prompts, the agent's responses, and any content the agent reads — for example, email messages or files — are processed by Microsoft 365 Copilot under your organization's agreement with Microsoft. None of that data is sent to Palamo by the agent, and Palamo has no system in the path that could receive it.

5. Permissions and Access

An agent works with the permissions of the person who is signed in and using it. It can reach only content that user can already access on their own, limited further to the data sources named in the agent's configuration — an agent narrows what a user can reach, it does not expand it. What a given agent may read or do is set out in that configuration and described in the agent's description. Your organization's Microsoft 365 administrators control whether an agent is installed in your tenant and who inside your organization may use it.

6. Microsoft's Role

Because agents run on Microsoft 365 Copilot, Microsoft's handling of the prompts, responses, and content involved in each interaction is governed by your organization's own agreement with Microsoft, not by Palamo. For details on how Microsoft 365 Copilot processes this data, see Microsoft's Copilot privacy documentation. This policy addresses only Palamo's role; it does not restate Microsoft's own commitments, which are described at that link.

7. Palamo's Role During Build, Test, and Support Work

Separately from how an agent operates once delivered, Palamo may handle customer data while building, testing, or supporting an agent under a written agreement with your organization. That work can include reviewing sample data to design an agent's instructions, testing the agent against representative scenarios, and configuring the data sources it will draw on. Any customer data Palamo handles in that work is governed by the terms of that agreement, including any terms it sets on confidentiality, access, and the return or deletion of that data.

When Palamo uses AI tools as part of that build, test, or support work, we do so only with your organization's approval, and only with settings that stop the tool provider from training its models on your material.

8. Other People's Personal Data

An agent may read content that includes personal data belonging to people other than the signed-in user — for example, the senders of email messages an agent is configured to read. That data is read in place, inside your organization's Microsoft 365 tenant; Palamo does not receive it through the agent. Your organization controls that data, and any request concerning it should go to your organization. Requests concerning data that Palamo itself holds — for example, records from a build or support engagement — can be directed to support@palamo.ai.

9. Children's Privacy

Agents Palamo builds are business tools intended for use by personnel of the customer organization. They are not directed at children, and we do not design them for use by children.

10. Changes to This Policy

We may update this Agent Privacy Policy from time to time to reflect changes in the agents we build or how they are delivered. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

11. Contact Us

If you have questions about this Agent Privacy Policy, contact us:

Palamo Dev Studio LLC Henderson, NV support@palamo.ai