Privacy Policy
Last updated: November 10, 2026
1. Data We Collect
- Identity data: Public profile information from OAuth providers (GitHub, Google, WeChat), including user ID, username, avatar
- Service data: Organization, Gateway, and Ingress IDs, public IP addresses, domain names, and credential metadata
- Usage data: HTTPS request logs (for debugging and security)
- Payment data: Order information processed via Paddle (Global) or WeChat Pay (CN)
- Message data: Hosted Gateways process and store message content and related metadata to receive and deliver messages. A self-hosted Gateway processes messages in your deployment.
2. Why We Collect This Data
We collect data to: provide the service (domain allocation, HTTPS certificate issuance, authentication), security and fraud prevention, customer support, and legal compliance.
3. Data Relationships with Third-Party Providers
We do not store your OAuth passwords. Identity providers (GitHub, Google, WeChat) are used solely for authentication; we receive only the public profile information returned by the OAuth flow.
Payment data is processed by professional payment processors: Paddle (Merchant of Record) for Global, WeChat Pay for China. We do not directly store your credit card or payment account information.
See Paddle’s Privacy Notice for details about payment data handled by Paddle.
4. Cookies and Sessions
We use the following cookies:
- Platform Session Cookie: Maintains your login state, 7-day expiration
- Endpoint authentication: Gateways use access credentials to control access to protected endpoints.
5. Data Retention
We retain your account data until you delete your account or we terminate the service. Service data and logs are retained as needed for service delivery, security auditing, and compliance. Payment records are kept as required by applicable law.
6. Contact
For privacy-related questions, contact: privacy@agentof.me