Privacy Notice
Last updated: 7 November 2026
Who is responsible. Agent Guardrails, the trading name of a sole trader established in the United Kingdom, hello@agentguardrails.app. We are the controller for the data below. The controller's legal name and postal address are provided on request. Gumroad is a separate controller for payment data.
What we collect
- Purchases: name, email and order details, provided to us through Gumroad. We do not see card numbers.
- Support: emails you send and our replies.
- Services: contact details, project information, repository access you grant, invoices.
- Website: This site uses no analytics and sets no cookies. Gumroad and Stripe set their own cookies on their checkout pages and have their own privacy notices.
- Free plugin: it runs locally. We do not receive your code, commands or audit logs. No network calls, no telemetry. The audit log is written locally.
Why and on what lawful basis
- To deliver your order and give support: contract.
- To keep accounts and meet tax law: legal obligation.
- To send the three onboarding emails to buyers and answer queries: legitimate interests (and PECR soft opt-in, with an unsubscribe option).
- To send marketing to anyone else: only with consent.
Retention. Order and invoice records: 6 years after the tax year. Support emails: 2 years. Service project data and repo access: deleted within 30 days of delivery, and access revoked at handover.
Who we share with. Gumroad (payments), our email provider Cloudflare Email Routing, forwarding to Google (Gmail), our hosting provider Cloudflare Pages, AI tooling providers used on service work Anthropic (Claude Code), and accountants. We do not sell personal data.
International transfers. Some providers are outside the UK. We rely on adequacy or standard safeguards. Each provider's own privacy notice applies.
Your rights. Access, correction, deletion, restriction, objection, portability and withdrawing consent. Email hello@agentguardrails.app. You can complain to the Information Commissioner's Office (ico.org.uk).
Registration. We completed the ICO data protection fee self-assessment on 7 November 2026. The outcome was that no fee is payable (exempt). We will repeat the assessment if our processing changes.