Overview
This policy explains what personal information AgentDNA (“AgentDNA”, “we”, “us”) collects when you visit agentdna.io, fill in one of our forms or otherwise contact us, how we use it, and the choices you have.
It covers the website and its four forms: Get a demo, the Security Health Check, Contact and Report a vulnerability, along with the conversations that follow from them.
Data that customers process through the AgentDNA platform, such as agent identities, access decisions and provenance records, is governed by the agreement we sign with that customer, not by this policy.
Information we collect
Information you give us in our forms
Each form asks only for what we need to answer it. Fields marked as optional are up to you.
- Get a demo: your first and last name, work email, company, company size and role, and, if you choose, what you’d like to see.
- Security Health Check: your first and last name, work email, company, company size and how many AI agents you run in production, and, if you choose, the tools, APIs, MCP servers and apps your agents reach.
- Contact: your first and last name, work email, the topic of your message and the message itself, and, if you choose, your company.
- Report a vulnerability: the product and type of issue, how severe you think it is, a summary, what you found, how to reproduce it and, if you choose, its impact, the affected address, your name or handle and your email.
Details about your agents and systems
Some fields let you describe your agents, tools and environment in your own words. Please share only what you’re comfortable with, and never include passwords, API keys, tokens or other secrets, or other people’s personal information.
Vulnerability reports
You can report a vulnerability without giving a name or email. Anonymous reports still reach us with the standard technical information described below, such as your IP address. If your report contains personal information you came across while testing, we treat it as confidential and use it only to understand and fix the issue.
Information collected automatically
Like most websites, the servers that host agentdna.io keep standard technical logs, including your IP address, browser type, the pages you request and the time of each request, including when you send a form. We use these to keep the site running and secure, and to spot automated or abusive submissions.
The site saves a few small preferences in your browser, including the choice you make in the cookie banner. See Cookie Settings for exactly what is stored.
How we use it
- To reply to you and arrange the demo or conversation you asked for, and to tailor it to your environment.
- To prepare your Security Health Check: your health score, the risks and gaps we identify, and your customised report.
- To answer the message you sent us through the Contact form.
- To investigate, fix and keep a record of security issues you report, to keep you updated if you gave us an email, and to credit you if you asked us to.
- To follow up about your request, for example to schedule a call or send a document you asked for.
- To run, secure and improve the website, including protecting our forms from spam and abuse.
- To meet our legal obligations.
We don’t add you to marketing emails because you filled in a form. If we ever offer product news by email, it will be something you choose to receive, and every message will include a way to unsubscribe.
We don’t sell your personal information, we don’t share it for advertising, and we don’t use it to build advertising profiles. We don’t make decisions about you based solely on automated processing; a health score describes your agent environment, not you.
Legal bases
Where data protection law asks for a legal basis, we rely on:
- Steps you ask us to take before any agreement, such as arranging your demo or preparing your Security Health Check.
- Our legitimate interests in answering enquiries, following up on them, handling vulnerability reports, and running a secure website. We weigh these against your rights, and you can object at any time.
- Your consent for optional storage in your browser and for any product news you choose to receive. You can withdraw it at any time.
- Legal obligations that apply to us.
How long we keep it
- Demo, health check and contact requests: for as long as we are in conversation with you, and for a reasonable period afterwards so we can follow up and keep a record of what we discussed. If you become a customer, your agreement with us takes over.
- Health check reports: for as long as they are useful to you, and no longer than we keep the request they came from.
- Vulnerability reports: for as long as we need to fix the issue and keep a record of our security work.
- Technical logs: for a limited period, then deleted.
You can ask us to delete your information sooner, and we will, unless we need to keep it to meet a legal obligation or to resolve a dispute.
How we protect it
We protect personal information with technical and organisational measures appropriate to its sensitivity. Forms are sent over an encrypted connection, and access to what you send is limited to the people who need it. No method of transmission or storage is completely secure, but we work to keep your information safe, and if something goes wrong we will tell you when the law requires it.
Your rights
Depending on where you live, for example in the EU, the UK or California, you may have the right to:
- Access the personal information we hold about you, and get a copy of it in a portable format.
- Correct it, or ask us to delete it.
- Object to, or restrict, how we use it, including for follow-up messages.
- Withdraw your consent at any time, without affecting what we did before.
- Not be treated differently for using any of these rights.
To make a request, use our contact page and choose Privacy or data request as the topic. We may need to confirm it’s you before we act, and we’ll reply within the time the law allows. You can also complain to your local data protection authority.
Your choices
- Leave optional fields blank; we’ll still answer your request.
- Report a vulnerability without giving your name or email.
- Choose what the site stores in your browser, in the cookie banner or on Cookie Settings.
- Ask us at any time to stop following up with you.
International transfers
Our team and service providers may process information in countries other than yours. Where that happens, we use appropriate safeguards, such as standard contractual clauses, so your information stays protected.
Children
Our website, forms and services are meant for businesses and are not directed at children. We don’t knowingly collect personal information from anyone under 16. If you think a child has sent us their details, please tell us and we’ll delete them.
Changes to this policy
We may update this policy from time to time, for example when we add a form or change how we handle requests. When we do, we’ll change the date at the top of this page, and for significant changes we’ll make that clear on the site.
Contact us
Questions about this policy, or about your information, are welcome through our contact page. Choose Privacy or data request as the topic so it reaches the right person.