Privacy Policy

1. Information We Collect

When you use AgentWatch, we collect:

• Account Information: Email address and company name when you sign up.
• API Usage Data: Session IDs, token counts, and request metadata for budget enforcement.
• Telemetry: Anonymized performance metrics to improve our edge infrastructure.

2. How We Use Your Data

• Provide and maintain the AgentWatch service
• Enforce session budgets and detect anomalies
• Generate compliance reports (SOC 2 CC6.1)
• Send usage alerts and billing notifications
• Improve our edge infrastructure and anomaly detection models

3. Data Security

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). We use Cloudflare's global edge infrastructure with built-in DDoS protection and WAF. API keys are stored using hardware security modules (HSMs).

4. Data Retention

Session telemetry is retained for 90 days by default. Compliance reports are retained for 1 year. You can request early deletion by contacting our support team.

5. Third-Party Services

We use Cloudflare (edge infrastructure), Supabase (analytics storage), and Resend (transactional email). These providers have their own privacy policies governing data handling.

6. Your Rights

You have the right to access, correct, or delete your personal data. To exercise these rights, contact us at hello@agent-watch.dev.

7. Changes to This Policy

We may update this policy from time to time. Significant changes will be notified via email. Continued use of AgentWatch after changes constitutes acceptance of the updated policy.

8. Contact Us

For privacy-related inquiries, contact us at hello@agent-watch.dev.