What the live demo collects today: nothing. Everything at agentvisorai.me runs in your browser against built-in demo fixtures — no accounts, no server, no analytics, no cookies; the only storage is localStorage on your own device (theme + demo state, clearable with one click via “Reset demo data”). The policy below describes the hosted service that launches with the beta.

Draft (not yet reviewed by counsel). Ship-blocker before real customer signups: counsel-reviewed copy.

Privacy policy

Last updated: 2026-08-26.

1. What we collect

• Account: email, display name, argon2id password hash, org name.
• Session receipts: summaries your daemon posts — session id, agent name, model, token counts, cost estimate, tool-call metadata, blocked-vs-allowed markers, Ed25519 receipt signatures.
• Server logs: request method, path, status, latency, IP, request-id. Log lines never contain your password, session tokens, or reset tokens (verified with pino-redact + audit).
• Uptime metrics: aggregate counts + latency histograms, no per-user granularity.

2. What we do NOT collect

• LLM prompt text
• LLM completion text
• Tool call arguments (default; opt-in stores hashes only)
• Your customers' end-user PII

These live inside your infrastructure. Our daemon runs in your environment; only the summaries and receipts leave.

3. How we store it

Encrypted in transit (TLS 1.2+), encrypted at rest (managed Postgres provider defaults; typically AES-256). Passwords hashed with argon2id (19 MiB × 2 iterations × 1 lane, meets OWASP 2024 baseline).

4. Who we share it with

Nobody, unless legally compelled. Sub-processors:

• Fly.io — API hosting (Europe/US regions).
• Neon — managed Postgres (or equivalent).
• Cloudflare — TLS termination + edge caching for the console SPA.
• GitHub — source control, container image registry.

5. Your rights (GDPR + CCPA baseline)

• Export: POST /api/v1/auth/me/export (password re-entry required) — full JSON dump of your org.
• Delete: POST /api/v1/auth/me/delete-account (owner + password + confirmation string required) — cascading delete.
• Access + rectify: everything is editable in the console.
• Object + restrict: email hello@agentvisorai.me for anything you can't do in-app.

6. Cookies

One cookie: av_session, an HS256 JWT, httpOnly, SameSite=Lax, Secure in production, 7-day TTL. No tracking cookies. No third-party trackers. No analytics beacons.

7. Data retention

We keep your data as long as your account exists. Deleting your account triggers immediate cascade delete. Nightly backups are retained for 30 days per the backup workflow — after that a restore isn't possible.

8. Children

Not for anyone under 16.

9. Contact

Data protection questions or requests: open a GitHub issue (the mail domain goes live with the beta). Security: security.txt.