Privacy Policy

Flow Investment AG Switzerland Email: contact@agenteye.io

AgentEye is a product operated by Flow Investment AG. This policy describes how we process personal data when you use AgentEye.io.

• Website URLs you submit for scanning or Agent Test requests, including derived public content fetched from those URLs (HTML, text files such as robots.txt and sitemap.xml).
• Email address when you request a report by email, optional tips, or contact us.
• Name and message when you use contact or Agent Test request forms.
• Technical data processed by our hosting provider: IP address, request timestamps, user agent, and server logs needed to operate and secure the service.
• Admin session data (HTTP-only cookie) for password-protected admin access only — not set for regular visitors.

We do not require user accounts for the free scan. We do not run advertising, retargeting, or cross-site profiling.

• Free scan & reports: to analyse publicly accessible website content you submit and display results (contract / legitimate interest).
• Email reports: to send the report you requested (consent / contract).
• Optional tips & score alerts: only if you opt in via the second checkbox (consent; withdraw via unsubscribe link).
• Agent Test & contact requests: to respond and deliver paid or requested services (contract / pre-contract).
• Security & operations: to protect the service, prevent abuse, and maintain infrastructure (legitimate interest).

We do not use marketing cookies, analytics cookies, advertising pixels, or third-party tracking scripts (including Google Analytics, Google Tag Manager, Meta Pixel, LinkedIn Insight Tag, Hotjar, Microsoft Clarity, or similar).

The following storage is used for strictly functional purposes only:

• localStorage key theme: stores your light/dark mode preference. Not used for tracking or advertising. You can clear it in your browser settings.
• Cookie ar_admin_session: set only after admin login. HTTP-only, SameSite=Lax, used for admin authentication. Not set for regular visitors.

Because we do not use non-essential cookies or invasive tracking, no cookie consent banner is required for the current implementation.

We use the following service providers to operate AgentEye:

• Vercel — website hosting, serverless functions, and edge delivery. Receives IP addresses and request metadata.
• Upstash Redis (via Vercel integration, when configured) — stores scan reports, leads and form submissions.
• Resend (when configured) — transactional email delivery. Receives recipient email addresses and report content.

Fonts (Inter, JetBrains Mono) are loaded via Next.js next/font and self-hosted from our deployment — no Google Fonts requests from your browser on normal page loads.

When fulfilling Agent Tests, submitted website URLs and test data may be processed using AI browsing agents or model providers as needed to complete the audit. We do not send your data to ad networks.

• Scan report snapshots: up to 90 days by default.
• Email leads and form submissions: as long as needed to provide the service, then deleted or anonymised.
• Server logs: retained by the hosting provider according to their default operational periods.

Processors may process data in the United States or other countries. Where required, we rely on appropriate safeguards (e.g. Standard Contractual Clauses) with our processors.

Depending on applicable law (including Swiss FADP and, where applicable, GDPR), you may have the right to access, rectify, erase, restrict, object to processing, and data portability. You may withdraw consent at any time. Contact contact@agenteye.io. You may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local supervisory authority.

The service is not directed at children under 16. We do not knowingly collect their personal data.

We update this policy when our processing changes. The date at the top shows the current version.