Privacy Policy

Overview

Agents Locked, Inc. ("Agents Locked", "we", "us", or "our") operates agentslocked.com and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

By using Agents Locked, you agree to the collection and use of information in accordance with this policy. If you disagree with any part of this policy, please discontinue use of the service.

Data we collect

We collect the minimum data necessary to provide the service. This includes:

• Account information: Email address, name, and password (hashed) when you create an account.
• Payment information: Billing details processed and stored by Stripe. We never see or store your card number.
• Usage data: Scan metadata (timestamps, repo names, file counts, finding counts). Not source code.
• Log data: IP addresses, browser type, pages visited, and referrer URLs for security and debugging.
• Communications: Emails you send us, support tickets, and survey responses.

How we use it

We use the data we collect to:

• Provide, operate, and improve the Agents Locked service
• Send transactional emails (scan reports, account alerts)
• Send product updates and security digests (you can opt out anytime)
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Respond to support requests

We do not use your data for advertising. We do not sell your data to third parties. We do not train AI models on your data.

Your source code

We store scan results — finding descriptions, severity scores, file paths, and line numbers — but not the underlying code that generated them. You can delete your scan history from your account settings at any time.

Our employees cannot and do not access your source code. Scans run in isolated, ephemeral compute environments that are destroyed after each scan.

Data sharing

We share data only in the following limited circumstances:

• Service providers: Stripe (payments), AWS (infrastructure), Resend (email). All are contractually bound to protect your data.
• Legal compliance: If required by law, court order, or to protect the rights and safety of Agents Locked or others.
• Business transfers: In the event of a merger or acquisition, your data may transfer to the new entity under the same protections.

We never sell, rent, or trade your personal information to third parties for marketing or any other purpose.

Data retention

We retain your account data for as long as your account is active, or as needed to provide services. Scan results are retained for 90 days by default on the Free plan, and indefinitely on Pro and Team plans (until you delete them).

If you delete your account, we delete all associated personal data within 30 days, except where we're required to retain it by law.

Security

We implement industry-standard security measures including:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Isolated, ephemeral scan environments per user
• Regular third-party penetration testing
• SOC 2 Type II compliance (Team plan)
• Multi-factor authentication for all internal systems

We're a security company. We hold ourselves to a higher standard. If you discover a vulnerability in our systems, please report it responsibly to security@agentslocked.com.

Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict how we process your data
• Data portability — receive your data in a machine-readable format
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email us at privacy@agentslocked.com. We'll respond within 30 days.

Cookies

We use a minimal set of cookies to operate the service:

• Strictly necessary: Session tokens and authentication state. Required for the service to function.
• Analytics: We use privacy-respecting analytics (no cross-site tracking, IP anonymization). You can opt out in your account settings.

We do not use advertising cookies or third-party tracking pixels.

Changes to this policy

We may update this Privacy Policy from time to time. We'll notify you of material changes by email and by updating the "Last updated" date above. Continued use of Agents Locked after changes constitutes acceptance of the updated policy.

Contact us

Questions, concerns, or requests regarding this Privacy Policy?