1. Overview
AgentShelf ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information about you when you use AgentShelf.io (the "Service"). By using the Service, you agree to the collection and use of information as described in this policy. This policy applies to all users, including visitors who do not create accounts.
2. Data We Collect
We collect the following categories of data: Account information: When you register, we collect your name, email address, and (optionally) a profile photo. If you sign in with Google, we receive your name, email, and profile photo from Google. Submitted content: Reviews, ratings, tool submissions, contact form messages, and profile bio text that you voluntarily provide. Usage data: Pages visited, search queries, listings clicked, time spent on pages, and browser/device information collected automatically through our servers and analytics tools. Payment information: If you subscribe to a Featured or Spotlight plan, payment is processed by Stripe. We receive a confirmation token but never store your full card number, CVV, or billing address.
3. How We Use Your Data
We use collected data to: operate and improve the Service; authenticate your account; display your reviews and bookmarks; process payments via Stripe; send transactional emails (account confirmation, submission status updates); respond to contact form inquiries; monitor for abuse and enforce our Terms of Service; and generate aggregate analytics about how the Service is used. We do not sell your personal data to third parties.
4. Data Sharing
We share your data only with the following trusted service providers, and only as necessary to provide the Service: Stripe: Payment processing for Featured and Spotlight subscriptions. Stripe's privacy policy is available at stripe.com/privacy. Google: OAuth sign-in. When you choose "Sign in with Google," your session is authenticated via Google's OAuth 2.0 system. Google's privacy policy is available at policies.google.com/privacy. Vercel: Our hosting platform. Your requests and server logs are processed by Vercel's infrastructure. Vercel's privacy policy is available at vercel.com/legal/privacy-policy. Resend: Transactional email delivery. Your email address is passed to Resend to send account and notification emails. Resend's privacy policy is available at resend.com/legal/privacy-policy. We do not share your personal information with advertisers, data brokers, or any other third parties not listed above.
6. Data Retention
We retain your account information and submitted content for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or compliance purposes. Aggregated, anonymized analytics data may be retained indefinitely.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data: Access: Request a copy of the personal data we hold about you. Correction: Request that we correct inaccurate or incomplete data. Deletion: Request that we delete your personal data (right to be forgotten). Export: Request a machine-readable copy of your data. If you are a resident of the European Economic Area (EEA), your rights are governed by the General Data Protection Regulation (GDPR). If you are a California resident, your rights are governed by the California Consumer Privacy Act (CCPA). To exercise any of these rights, email privacy@agentshelf.io. We will respond within 30 days. We may need to verify your identity before processing your request.
8. Security
We take reasonable technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Passwords are hashed using bcrypt before storage — we never store plaintext passwords. Payment data is handled exclusively by Stripe and is never stored on our servers. All data is transmitted over HTTPS. Despite these measures, no internet transmission is 100% secure, and we cannot guarantee absolute security.
9. Children's Privacy
The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that we have inadvertently collected personal information from a child under 13, we will delete it promptly. If you believe we may have collected data from a child, please contact us at privacy@agentshelf.io.
10. International Users
AgentShelf is operated from the United States. If you access the Service from outside the United States, your data may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to this transfer. We will take appropriate steps to ensure that your data receives adequate protection in accordance with this Privacy Policy.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify registered users by email and post a notice on the Service. The updated policy will be effective upon posting. Your continued use of the Service after the updated policy becomes effective constitutes your acceptance of the changes.
12. Contact
For privacy-related questions, requests to exercise your rights, or concerns about our data practices, contact us at privacy@agentshelf.io. We will respond within 30 days.
Questions about this Privacy Policy? Email us at privacy@agentshelf.io.