Privacy — agentguard

Last updated 7 October 2026.

Who holds it

Your data is held by TrainedBooks, an independent software business in California, United States, which operates the agentwares products. Questions, exports and deletions: https://agentwares.vercel.app/contact.

Data is stored in the United States. If you are in the EEA or the UK, that is a transfer outside your region, and using the service is you asking us to provide it from there.

What we collect

  • Account identity: your GitHub login, name, email and avatar, so you can sign in.
  • What you configure: the targets, servers, policies or queries you set up.
  • Run output: what the service produced, and transcripts of what your endpoints returned. These can contain whatever your systems return, so treat them as you would your own logs.
  • Billing records, held by Stripe. We never see or store your card number.
  • If you write to us through the contact form: your message, the reply address if you give one, and a one-way hash of your network address made with a salt that is discarded every day, kept only to limit how many messages one sender can send. The address itself is never stored.
  • Page views, whether or not you are signed in: each page load here sends one to our own collector at agentwares.vercel.app, holding this site's host, the page's path (never its query string), the host of the page that linked you here if there was one, and two yes-or-no flags — whether the browser looks like a crawler and whether it is one of our own scripts. The user-agent is read to set those flags and then discarded, and your network address is held in memory for up to a minute, to stop one client flooding the collector, and never written down. No cookie is set or read. Page views identify nobody, so they are kept without an expiry date.

What we do not do

We do not sell your data. We do not use your content to train models. We do not share it with anyone except the processors below, and only to run the service.

Who else touches it

  • Vercel (hosting) and Neon (database), both in the United States.
  • Stripe, for payments.
  • Resend, Slack and Discord, only to deliver alerts you asked for.

How long we keep it

Run results are kept for the retention window of your plan and deleted automatically after that. Delete your account and we remove the rest.

Blockchain payments are the exception we cannot honour a deletion request for: a public chain is not ours to erase.

Your rights

Ask and you get a copy of your data, a correction, or its deletion — whether or not the law where you live requires it of us. Ask at https://agentwares.vercel.app/contact. We aim to answer within 30 days.

Secrets

Credentials you give the service are used to make the requests you asked for and are not shown back to you in the interface. Give it the smallest credential that works: a read-only key is a smaller blast radius than a write key.