PRIVACY
POLICY

This policy covers AgentProof: its website and iPhone previews, accounts, and the agents you run from the dashboard. AgentProof is in development. Its public demo shows simulated attacks and defenses. The operator responsible for your personal information is listed below.

OPERATOR

[LEGAL OPERATOR NAME]

ADDRESS

[REGISTERED ADDRESS AND COUNTRY]

WEBSITE

isagentproof.com

CONTACT

[PRIVACY CONTACT EMAIL]

Website previews are switched off while the demo is rebuilt. The capture service that opened submitted pages in a temporary browser was removed on November 8, 2026.

If you submit a website link now, it reaches our server, which does not open the page or contact the website. The application does not save submitted links to a database. Provider logs and backups are covered below.

Submit public links only. Keep passwords, access tokens, private links, and personal information out of URLs. The simulated attack requests and payloads are display text. They are never sent to any site.

When you search for an app, the preview service receives its name or App Store ID. If it has no fresh cached result, it sends the query or ID and storefront country to Apple's iTunes Search API. Results include the app name, developer, App Store link, icon, and published screenshot URLs.

The service caches queries, IDs, and results in memory and a local file. It reuses results for 24 hours. That does not mean records are deleted after 24 hours. Expired records can remain until the file is next written. The final deletion schedule is [APP SEARCH CACHE DELETION SCHEDULE].

Your browser loads app images from Apple's servers. Apple receives your network address and ordinary browser request information. Team changes and replays reuse the existing result. Switching screenshots may load another image.

The iPhone preview shows published screenshots. It cannot access your installed apps, device contents, Apple account, or a live iPhone session. Apple's own Apple Privacy Policy covers its processing.

An account stores your email address, an optional display name, your time zone and calendar view, and a password hash. The password itself is never stored or logged. Passwords are hashed with Argon2id.

We send account email through Resend: a confirmation link when you sign up, and a reset link when you ask for one. Resend receives your email address and the message. Links expire after 24 hours (confirmation) or one hour (reset) and work once.

Each sign-in creates a session. We keep a hash of its token, the time it started, the last time it was used, and your browser's user agent so you can see and end it in Settings. Sessions end after 30 minutes without use or 12 hours in total. API tokens you create are stored as hashes and shown once.

When a workspace subscribes, Stripe collects the payment details on its own pages. We send Stripe the email address of the person who starts the subscription and the workspace name. We store the Stripe customer and subscription IDs, the plan, the billing period and the subscription status. We never receive or store card numbers. Stripe's Stripe Privacy Policy covers its processing.

A run sends your task, any files you attach, and your follow-up messages to an agent computer. Each agent has its own private virtual machine at Boat. Your text and screenshots from that machine go to the model provider, [MODEL PROVIDER LEGAL NAME], through our gateway. The agent can browse the web and run commands on its own machine, so the sites it visits see that machine's requests.

We record what happened: messages, tool activity, files the agent produced, token usage, and the result. Reports and that evidence are kept for as long as the workspace exists, so you can go back to any run. Uploads never used in a run are deleted after 7 days. Records of skipped scheduled runs are deleted after 90 days.

Each agent's machine keeps its files, browser profile and installed tools between runs, saved as one checkpoint, until the agent or workspace is deleted. Provider backups follow the schedule below.

Agents, runs, schedules and reports belong to a workspace. Everyone in a workspace can see its runs and reports, including tasks and results added by other members. Members can also see each other's names and email addresses. Your password, sessions, API tokens and preferences stay yours.

When you invite someone, we email them an invitation link through Resend. If you leave or are removed, your access ends, but the runs, reports and schedules you created stay with the workspace, marked as yours. Deleting your account removes your login and any workspace where you are the only member. If you own a shared workspace, you must transfer it first. The owner can delete a workspace. That removes its agents, machines, checkpoints, files, reports and evidence for every member.

The site uses two strictly necessary cookies. __Host-ap_session keeps you signed in. __Host-ap_pre protects sign-up and sign-in forms from cross-site requests. Both are HttpOnly and sent only to this site over HTTPS. The dashboard keeps your current calendar and report filters in sessionStorage, which your browser clears when you close the tab. There is no advertising integration or analytics tracker. Your browser may cache site files and app images.

Hosting, network, and service providers may process IP addresses, request times, browser details, requested paths, and errors to run and protect the site. The following deployment details still need to be completed:

PROVIDERS

Sliplane (website and API hosting), Boat (agent computers), Resend (account email), Stripe (payments), [MODEL PROVIDER], [CDN AND OTHER PROVIDERS]

LOGS

[LOG FIELDS, PURPOSES, AND RETENTION]

BACKUPS

[BACKUP RETENTION AND DELETION]

LOCATIONS

[PROCESSING COUNTRIES]

The application uses your URL or app query to return a preview, reuse app results, and limit requests. It uses your account details to sign you in, send account email, enforce your run allowance, and run the tasks you give your agents. Technical records may help investigate errors or misuse. The prototype has no feature that sells personal information or shares it for targeted advertising.

Information goes to Apple and the other providers as described above. The operator may also disclose information when the law requires it. Other recipients or uses: [ADDITIONAL RECIPIENTS AND PURPOSES, OR NONE].

Where the law requires a lawful basis for processing, the operator's bases are [LAWFUL BASIS FOR EACH PROCESSING PURPOSE]. Required safeguards for international transfers are [TRANSFER MECHANISMS AND SAFEGUARDS].

You can browse without an account or without submitting a website or app query. In Settings you can change your details, end sessions, revoke API tokens, leave or delete a workspace, and delete your account. Reloading or closing the page clears its preview and simulation state from memory. It does not clear service caches or provider logs.

Your rights depend on your location and the law that applies. They may include accessing, correcting, deleting, or getting a copy of your personal information. You may also be able to restrict or object to processing, withdraw consent where it is the basis for processing, or complain to a data protection authority. Legal exceptions and identity checks may limit a request.

Send requests to [PRIVACY CONTACT EMAIL OR REQUEST CHANNEL]. Response times and appeals: [RIGHTS REQUEST AND APPEAL PROCEDURE].

Each agent runs in its own isolated virtual machine, and the public demo sends no requests to the sites you enter. These controls cannot guarantee complete security. Deployment safeguards and incident contact: [DEPLOYMENT SECURITY PRACTICES AND INCIDENT CONTACT].

Age eligibility: [MINIMUM AGE AND APPLICABLE CHILDREN'S PRIVACY ARRANGEMENTS]. Contact the privacy address above with concerns about a child's personal information.

The effective date shows which version you are reading. Changes to data handling will appear here, with any further notice or consent the law requires. The Terms of Service cover use of the prototype.