Privacy Policy

Your privacy matters to us. This policy explains what data we collect, how we use it, and your rights.

What We Collect

• Account information: When you sign in with Google, we receive your name, email address, and profile picture from Google.
• Agent listings: Content you submit (names, descriptions, URLs, images) is stored and displayed publicly.
• Usage data: We count page views and upvotes. IP addresses are hashed before storage — we never store raw IPs.
• Enquiries: Messages sent through contact forms are stored and delivered to the agent's builder.

What We Do NOT Collect

• No Google Analytics, Facebook Pixel, or third-party ad trackers.
• We do not sell your data to anyone, ever.
• We do not store your Google OAuth tokens — only the profile data needed to create your account.

How We Use Your Data

• To authenticate you and maintain your session (JWT cookie, expires in 30 days).
• To display your agent listings and builder profile publicly.
• To send enquiry notifications and (if opted in) weekly digest emails via Resend.
• To generate aggregate analytics visible only to you in your dashboard.

Data Storage

Your data is stored in Cloudflare D1 (SQLite at the edge) and Cloudflare R2 (object storage). Cloudflare's infrastructure is GDPR-compliant. Your data is not shared with any third party except as required to operate the service (Cloudflare, Resend for email).

Your Rights (GDPR)

• Access: Export all your data at any time from your dashboard — Settings → Export Data.
• Deletion: Delete your account from Settings → Delete Account. This removes your profile and archives your listings.
• Correction: Edit your profile and agent listings at any time from the dashboard.

Cookies

We use one cookie: af_session — a signed JWT that keeps you logged in for 30 days. It is HttpOnly (not accessible to JavaScript), Secure (HTTPS only), and SameSite=Lax. No tracking cookies.

Contact

Questions? Email privacy@agentfolio.online.