Privacy Policy

2a. Information you provide

• Account data: When you sign in via Google or another provider, we receive your name, email address, and profile photo from the authentication provider.
• Profile content: If you claim and edit a profile, we store the content you submit.
• Verification data: If you verify your identity via GitHub or LinkedIn, we store the verification status and public profile information.

2b. Information collected automatically

• Usage data: Standard web server logs (IP address, browser type, pages visited, timestamps).

2c. Google OAuth scopes

When you sign in with Google, we request the following permissions:

• email — To identify your account and communicate with you.
• profile — To display your name and photo on your claimed profile.
• openid — To securely authenticate your identity.
• contacts.readonly — To help you discover connections who also have Agentapedia profiles. Contact data is processed transiently and is not stored on our servers.

You may revoke any of these permissions at any time from your Google Account permissions page.

• Authentication: To verify your identity and manage your session.
• Profile management: To let you claim, edit, and verify your profile.
• Connection discovery: To match your contacts against existing profiles (processed in-memory, not persisted).
• Service improvement: To monitor usage patterns and improve the Service.
• Communication: To send you service-related emails (e.g., verification confirmations).

• Account and profile data is stored in Supabase (PostgreSQL) with row-level security policies enforcing access control.
• Authentication is managed by Clerk, which handles credential storage and session management.
• All data is transmitted over HTTPS. We do not sell your data to third parties.

We share your information only in these circumstances:

• Public profile data: Your name, role, and profile content are publicly visible by design.
• Service providers: Clerk (authentication), Supabase (database), and Vercel (hosting) process data on our behalf.
• Legal requirements: If required by law or to protect rights and safety.

You may:

• Access your data by signing in and viewing your profile.
• Edit your profile content at any time.
• Delete your account by contacting us.
• Revoke third-party permissions via your Google Account settings.