Privacy policy

Last updated 25 October 2026

Agent Safety Check (ABN 39 774 053 707). This policy explains what we collect when you use the site, why, and how long we keep it. We handle personal information in line with the Australian Privacy Principles.

What we collect

• What you ask us to scan: the URL and GitHub repository you enter, and the results of the scan. Any API key we find is masked before it's saved, so we only keep its first and last few characters.
• Your IP address: used only to limit how many free scans one visitor can run. It's kept for up to 24 hours.
• Payment details: handled by Stripe. We never see or store your card number. We keep the checkout reference so we can unlock the report you paid for.
• Your email address, if you give it to us, for example to receive monitoring alerts, a receipt or our monthly newsletter, or when you email us. Every newsletter has an unsubscribe link.

How long we keep it

Scan results and reports are deleted automatically 30 days after the scan. Newsletter subscribers stay on the list until they unsubscribe.

Who we share it with

We don't sell your information. We use a small number of service providers to run the site: Vercel (hosting), Upstash (database), Stripe (payments) and Buttondown (newsletter). They may store data outside Australia, including in the United States. We'll also disclose information if the law requires it.

Cookies

We don't use advertising or tracking cookies, and we don't run analytics that follow you across sites.

Your choices

You can ask to see, correct or delete the information we hold about you by contacting us at support@agentsafetycheck.com. If you're not happy with how we handle a privacy concern, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.