Privacy notice

Who is responsible

The controller is ECOM FR LLC, which operates AgentToolWorks, 28 Geary Street, Suite 650, #303, San Francisco, California 94108, United States. Contact: support@agenttoolworks.com.

What we collect, and why

• Your email address, to create your account, send sign-in links and tell you about your key, a payment or a security issue. Legal basis: performing our contract with you. We do not send marketing email.
• Your API keys, stored only as a one-way hash. We cannot read a key back after showing it to you once.
• A usage record per call: which tool, when, how many credits, and whether it succeeded. Never the arguments you sent or the answer we returned. Legal basis: contract, and keeping accurate accounts.
• Your credit balance and purchases: amounts, dates and the Stripe reference of each payment. Legal basis: contract and our accounting obligations.
• Your IP address, used transiently to rate-limit signups and sign-in requests and to stop abuse. Legal basis: our legitimate interest in keeping the service available.

Cookies

One cookie, atw_session, set when you sign in to the website and valid for 30 days or until you sign out. It is strictly necessary to keep you signed in, so it needs no consent. The signup page loads Cloudflare Turnstile to tell people from bots. We run no analytics, no advertising and no tracking pixels.

Who processes it for us

• Cloudflare: hosting, database and the Turnstile check.
• Postmark (ActiveCampaign): sending sign-in and account emails.
• Stripe: taking card payments. Your card details go to Stripe directly and never reach our servers.

Some of them process data in the United States. We do not sell or rent personal data to anyone.

How long we keep it

Account data is kept while your account exists. Detailed usage records stay in the live database for 90 days and are then moved to archive storage, kept for accounting. Payment records are kept as long as accounting law requires. Sign-in links expire after 15 minutes and sessions after 30 days.

Your rights

You can ask for a copy of your data, its correction, or the deletion of your account by writing to support@agenttoolworks.com from the address on the account. If you are in the European Union or the United Kingdom you also have the rights to restrict or object to processing, to data portability, and to complain to your data protection authority. Records we must keep for accounting survive a deletion request, stripped of anything not needed for that purpose.