Summary
This policy covers three distinct contexts: the AgentCTX platform (the open-source SDK and runtime you self-host), AgentCTX Cloud (our managed hosted service), and the AgentCTX website (agentctx.ai). Each has different data practices.
The AgentCTX Platform
The AgentCTX platform — including the SDK, CLI, gateway, and all runtime components — does not collect, transmit, or store any personal data. It runs entirely within your infrastructure. There is no telemetry, no usage reporting, and no phone-home behavior of any kind.
- No personal information collected
- No telemetry or usage reporting
- No data transmitted to AgentCTX servers
- No cookies, tracking, or fingerprinting
- Fully self-hosted — your data never leaves your environment
AgentCTX Cloud
If you use AgentCTX Cloud (our managed hosted service), we collect information necessary to operate the service, process billing, and comply with legal obligations. This includes:
- Account information (name, email, organization)
- Billing and payment details (processed by our payment provider)
- Service usage metrics (API calls, token consumption, storage) for billing and capacity planning
- Authentication and access logs for security
We do not access, read, or analyze the content of your agent context, memory planes, or knowledge data. Your workload data is encrypted at rest and in transit and is logically isolated per tenant.
The AgentCTX Website
The AgentCTX website (agentctx.ai) uses analytics and tracking technologies for marketing purposes. This helps us understand how visitors find and use our website so we can improve our content and reach.
Website Analytics & Tracking
We use third-party analytics services on our website to collect information about visitor behavior. This may include:
- Pages visited, time on site, and navigation patterns
- Referral sources and search terms
- Browser type, device type, and screen resolution
- Approximate geographic location (derived from IP address)
- Interactions with page elements (clicks, scrolls)
This information is used solely for marketing analytics and website optimization. It is not used to personally identify individual visitors.
Cookies
The AgentCTX website may use cookies and similar technologies to support analytics and marketing functionality. These may include:
- Analytics cookies — to understand visitor behavior and improve our site
- Authentication cookies — HttpOnly, Secure session cookies for logged-in users (actx_session). Contains a signed JWT with your email and plan tier. No third-party access.
- Marketing cookies — to measure the effectiveness of our marketing efforts
You can control cookie behavior through your browser settings. Blocking cookies will not affect your ability to browse the website.
Marketing Communications
If you voluntarily provide your email address (e.g., through a signup form or contact request), we may use it to send you product updates and marketing communications. You can unsubscribe at any time via the link provided in every email.
Server Access Logs
Our hosting infrastructure collects standard server access logs (IP address, timestamp, requested URL, HTTP status code) as part of normal web server operation. These logs are used solely for security monitoring and are automatically purged within 30 days.
API Endpoint
The /api/agent-info.json endpoint returns public project information.
It does not log, store, or process any data about the requester beyond what appears
in standard server access logs.
Third-Party Service Providers
To operate our services, we work with the following third-party providers. Each processes data only as necessary for their stated purpose:
- Polar.sh — Payment processing and subscription management. Polar acts as our Merchant of Record, handling all billing, tax collection, and payment data. We do not store credit card numbers.
- emailit.com — Transactional email delivery (magic link authentication, payment notifications). We disable all tracking features (no open tracking, no click tracking).
- Cloudflare — Website hosting (Cloudflare Pages), CDN, DDoS protection, and DNS. Server access logs are retained per Cloudflare's data processing agreement.
- Cloudflare AI Gateway — For Pro tier and above, LLM API requests may be routed through Cloudflare AI Gateway for rate limiting, caching, and failover. Request content is not logged or stored by the gateway.
- SurrealDB Cloud — For paid tiers, tenant data (agent memory, knowledge, session state) is stored in SurrealDB Cloud with per-tenant encryption and namespace isolation.
Your Rights (GDPR / CCPA)
For the platform: Since the AgentCTX platform does not collect any data, there is nothing to access, correct, delete, or port.
For AgentCTX Cloud: You may request access to, export of, correction of, or deletion of your account and billing data at any time. Upon account termination, all associated data is permanently deleted within 30 days.
For the website: You have the right to request access to, deletion of, or information about any data collected through our website analytics. You may also opt out of tracking by adjusting your browser's cookie settings or using a privacy-focused browser extension.
For any data-related requests, contact us at:
Changes to This Policy
We may update this policy from time to time. Material changes will be prominently displayed on the website. The effective date above reflects the most recent revision.