Privacy Policy

1. Who we are

Agent Ander ("we", "us") provides an AI website building and hosting service at agentander.com. This policy explains what we collect, why, and the rights you have over your data.

2. What we collect

• Account data: email address, name, password (stored only as a salted hash).
• Website content: the files, pages, images, and text of websites you build with us.
• Conversations: your chat history with Agent Ander, needed to build and maintain your site.
• Technical data: IP address, user agent, and timestamps, used for security and rate limiting.
• Payment metadata: payment is processed by Square; we store only your Square customer/subscription references, never card details.

3. How we use it

• To operate your account and build, host, and maintain your website.
• To provide the AI assistant (Agent Ander). All AI processing runs on our own hardware — your content is not sent to third-party AI services.
• To secure the service and prevent abuse (login throttling, suspicious activity review).
• To send you service emails (we do not use third-party advertising or sell your data).

During onboarding, Agent Ander may perform public web lookups about the business you ask us to build for, to gather accurate public information such as hours and reviews.

4. Your rights (GDPR / CCPA)

• Export: download a zip of your site and all your data at any time from your dashboard.
• Delete: delete your account and we permanently remove your data within 30 days.
• Access / correction / objection: contact us at [email protected].
• We do not sell personal information (CCPA).

5. Data retention

We retain data only as long as needed to provide the service. Encrypted backups are retained on a rolling 7-day schedule.

6. Security

We use transport encryption, hashed passwords, session-based authentication, rate limiting, and encrypted backups. Your websites are served from isolated subdomains.

7. Contact

Questions about privacy: [email protected]