Privacy Policy

Last updated: May 8, 2026

1. Overview

Agentomy respects your privacy. This policy describes what data we collect, how we use it, and your rights regarding that data.

2. What We Collect

Website (agentomy.com):

• Pageview analytics (aggregated, no personal identification)
• No cookies for tracking purposes
• No personal data collected through website browsing

Agentomy Agent (open source):

• The open source framework does not collect telemetry
• No usage data is sent to Agentomy servers
• All governance data stays on your infrastructure
• Audit trail data is stored locally, never transmitted externally

GovernanceBench:

• When run locally: no data leaves your environment
• When run against agentomy.com/governancebench/api: only the test payloads and scores are processed; no user-specific data is collected

Contact forms and email:

• If you contact governance@agentomy.com, we retain your email and message content to respond to your inquiry
• We do not sell or share contact information with third parties

3. BYOK (Bring Your Own Key) Data Handling

If you use Agentomy with your own API key (Tier 2):

• Your API key is encrypted at rest using AES-256
• Your API key never appears in audit trail events, governance reports, or logs
• Only the last 4 characters of your key are displayed after entry
• Key deletion is immediate and permanent

4. Analytics

We use privacy-respecting analytics on agentomy.com. No cookies. No personal data collected. No user-level tracking. We measure aggregate pageviews, unique visitors, and referral sources only.

5. Third-Party Services

The Agentomy website is hosted on Vercel. Vercel's privacy policy applies to the hosting infrastructure. No other third-party services process user data on the website.

6. Data Retention

Website analytics data is retained in aggregate form. Contact email correspondence is retained for the purpose of responding to inquiries. No personal data is retained beyond what is necessary for the stated purpose.

7. Your Rights

Under Quebec Law 25 (Act respecting the protection of personal information in the private sector) and GDPR (if applicable):

• You have the right to access any personal data we hold about you
• You have the right to request correction or deletion of your data
• You have the right to withdraw consent for data processing
• Contact: governance@agentomy.com

8. Data Location

Agentomy is based in Montreal, Quebec, Canada. Website hosting infrastructure is provided by Vercel (global CDN). No user data is processed through jurisdictions that would create regulatory conflict for enterprise deployments.

9. Children

Agentomy is not directed at individuals under 18. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this policy. Changes will be noted with an updated date at the top of this page. Continued use of the service constitutes acceptance of the revised policy.

11. Contact

Privacy inquiries: governance@agentomy.com

Agentomy, Montreal, Quebec, Canada