Draft — not yet reviewed
This notice describes accurately what the website does today, but it has not been reviewed by a lawyer and several details are unfilled. It should not be relied on as a legal disclosure until the placeholders below are completed and it has been reviewed against the law of the jurisdictions you operate in.
Legal
Privacy notice
What this website collects, why, where it goes and how long it stays. It covers this website only — not the Agent Trust Cloud product, which is not generally available.
Last updated: 18 September 2026
Who we are
This website is operated by [LEGAL ENTITY NAME], registered at [REGISTERED ADDRESS]. For anything in this notice, including requests about your data, contact [PRIVACY CONTACT EMAIL].
What you give us
The only place this site asks for personal data is the pilot request form. Nothing else on the site collects input.
| Field | Required | Why |
|---|---|---|
| Full name | Required | Identifying who is asking |
| Work email | Required | Replying to you; set as reply-to on the notification |
| Company | Required | Qualifying and routing the enquiry |
| Role | Optional | Understanding who we are speaking to |
| Primary interest | Optional | Routing to the right part of the product |
| What are you trying to control? | Optional, free text | Preparing for the conversation |
The free-text field is yours to fill as you choose. The form asks you not to include credentials, customer records or production data, and we would rather you did not — anything you type there is sent onward and stored in the mailbox that receives it.
What is collected automatically
Our hosting provider records ordinary web server logs for every request: source IP address, user agent, the path requested, the response status and a timestamp. We use these to operate and debug the site.
When you submit the form, your IP address is also used in memory to rate limit submissions, so one network cannot flood the form. That counter is not written to storage and is discarded when it expires or the server restarts.
The form records how long the page was open before you submitted it. If that is unusually short — which is normally automated abuse, occasionally a person using autofill — the submission is still delivered, with a note attached so a human can judge it. The form also contains a field hidden from view; if it is filled in, the submission is treated as automated and is discarded rather than delivered.
What ends up in our application logs
When a submission is delivered successfully we log a short reference and the company name. If every delivery destination fails, we additionally log the company name and the email address, so the enquiry can be recovered by hand rather than being lost silently. These logs are retained by our hosting provider for its standard log retention period.
What we deliberately do not do
This site sets no cookies, runs no analytics, carries no advertising or tracking pixels, and stores nothing in your browser. It makes no third-party requests at all — fonts are served from this domain rather than a font CDN — so loading a page here does not disclose your visit to anyone else. There is no profiling and no automated decision-making about you.
Who else processes it
We do not sell personal data or share it for advertising. We use these providers to run the site:
- Railway — Hosting and server logs. The service runs in a United States region.
- Resend — Delivers the notification email for a form submission, and therefore processes what you submitted. Used only while email delivery is configured.
If you are outside the United States, submitting the form means your data is transferred there. [GOVERNING JURISDICTION] governs the safeguards that apply to that transfer and needs to be confirmed before launch.
How long we keep it
Enquiries are kept for [RETENTION PERIOD] and then deleted, unless the conversation has become a customer relationship with its own record. Server logs follow our hosting provider's retention period.
Your rights
Depending on where you live, you may have the right to ask for a copy of the data we hold about you, to have it corrected or deleted, to object to or restrict how we use it, and to complain to a data protection regulator. Write to [PRIVACY CONTACT EMAIL] and we will respond. You never need an account to exercise these rights, and we will not treat you differently for doing so.
Security
The site is served over HTTPS with a restrictive content security policy. Form submissions are validated and rate limited on the server. Credentials for delivery providers are held as environment variables and are not in the source code. That said, no transmission over the internet is completely secure, and the form is not the place for sensitive material.
Children
This is a business-to-business site and is not directed at children. We do not knowingly collect data from anyone under 16.
Changes
If this notice changes materially we will update the date at the top. Past versions are visible in the site's public source history.
Contact
Questions or requests: [PRIVACY CONTACT EMAIL]. You can also reach us through the contact form, though please do not put sensitive details in it.