Legal
Privacy Policy
Last updated June 2026
This Privacy Policy explains how AgentShield ("we", "us") collects, uses, and protects information when you use our website and product. We aim to handle data the way a security company should: minimally, transparently, and without ever training models on your content.
Information we collect
- Account information. When you sign up, we collect your email address and basic account details so we can set up and communicate about your account.
- Agent traffic we inspect. To enforce your policy and write your audit trail, the product processes the agent requests and actions you route through it. We inspect this traffic to apply your rules; we do not use it to train models.
- Usage data. We collect standard logs and analytics about how the website and product are used, including IP address and device information, to operate and secure the service.
- Contact messages. If you contact us, we keep your message and contact details to reply and follow up.
How we use information
We use information to provide and secure the service, enforce your policies, generate your audit trail, communicate with you, and improve the product. We do not sell your personal information, and we do not use your agent traffic, policies, or audit records to train AI models, ours or anyone else's.
Advertising measurement
We advertise on Google and Microsoft Bing. When you arrive from one of our ads, we keep the ad click identifier (such as gclid or msclkid) and the campaign parameters in a first-party cookie for up to 90 days, and store them with your signup and your account, so we know which ads lead to signups and purchases. When you pay, the same identifiers are attached to the payment record at our payment processor. We load no advertising tags or pixels from Google or Microsoft on this site, and we send no names, email addresses or payment details to them. You can block this cookie in your browser settings.
How we protect information
Data is encrypted in transit and at rest. Internal access is least-privilege and audited. The audit trail is append-only and tamper-evident. You control retention periods and may request deletion.
Sharing and subprocessors
We share information only with the subprocessors needed to run the service (such as hosting and email delivery), under contract. A current subprocessor list and a Data Processing Addendum are available on request.
Your rights
Depending on your location, you may have rights to access, correct, export, or delete your personal information. Contact us at [email protected] to exercise them.
Data retention
We retain account information for as long as your account is active, and audit and inspection data for the retention period you configure. Contact records are kept as long as needed to support you.
Changes
We may update this policy. We will post the new version here with an updated date.
Contact
Questions about privacy? Email [email protected].