Privacy Policy
We built AgentTag to give you control over AI agents — that commitment extends to how we handle your own data. Here is exactly what we collect and why.
Do you sell my data?
Never.
Do you use advertising trackers?
No.
Where is my data stored?
US or EU — your choice.
Do you see my agents' request contents?
No — only metadata.
1. Overview
AgentTag ("AgentTag", "we", "us", or "our") operates the AgentTag platform — an AI agent identity and governance service. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights regarding that information.
By creating an account or using the AgentTag platform, you agree to the terms of this Privacy Policy.
2. What data AgentTag collects
Account & contact information
When you register, we collect your name, email address, and any organisation details you provide. This is used to authenticate your account and contact you about the service.
Agent metadata
We collect information about the agents you register: their DID identifiers, mandate configurations, and request counts needed to populate the audit ledger. We do not collect the contents of requests your agents make to external services — only metadata (timestamps, tool names, response codes).
Audit ledger entries
Every action recorded in your audit ledger is stored in your chosen region (US or EU). You own this data. We do not analyse it for advertising or third-party purposes.
Server log data
Standard web server logs including IP addresses, browser type, referring URLs, and pages visited. Retained for up to 90 days for security and debugging purposes.
Payment information
AgentTag is free during the public beta. When paid plans launch, payment processing will be handled by a PCI-compliant third-party processor. AgentTag will not store raw card numbers.
3. How we use your data
- Provide, operate, and improve the AgentTag platform
- Authenticate your identity and manage your account
- Populate and maintain tamper-evident audit ledgers for your agents
- Send transactional emails (security alerts, account notices, billing updates)
- Send product updates you can unsubscribe from at any time
- Detect, investigate, and prevent security incidents or abuse
- Meet legal obligations and respond to lawful requests from authorities
We do not sell your personal information to third parties. We do not use your data for advertising.
4. Data storage & retention
Account data and audit ledger entries are stored in your chosen region (US or EU). We use AES-256 encryption at rest and TLS 1.3 in transit.
We retain your data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except where retention is required by law.
5. Third-party processors
We share data only with trusted processors needed to operate the platform: cloud infrastructure providers (hosting and storage) and email delivery services (transactional email). We maintain data processing agreements with all sub-processors.
We do not share your personal data with analytics companies, advertisers, or data brokers.
6. Your rights
- Access — request a copy of all personal data we hold about you
- Correction — ask us to correct inaccurate information
- Deletion — request deletion of your personal data
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interest
- Restriction — ask us to limit how we use your data while a dispute is resolved
To exercise any of these rights, email contact@agenttag.me. We respond within 30 days.
8. Changes to this policy
When we update this Privacy Policy, we will update the date below and notify registered users by email if the changes are material.
9. Contact
Questions about this Privacy Policy or how we handle your data: contact@agenttag.me
Questions about your data?
Email contact@agenttag.me — we respond within 30 days.