Privacy Policy

Last updated: October 11, 2026

This Privacy Policy explains how Ingenious AI, based in Orange Walk Town, Belize ("we", "us", "our"), collects, uses, and protects your information when you use Agent Auth Gateway (the "Service") — the policy, spend, and approval layer for AI agents.

1. Information we collect

• Account information: email address, password (stored hashed), and profile details you provide at signup.
• Service data: the content you submit to the Service — agent names, owners, risk tiers, spend caps, action allowlists and denylists, the actions your agents route through the proxy (action names and estimated costs), approval requests and decisions, notification settings, webhook URLs, and API keys (stored hashed). Policy evaluations are logged so you can view dashboards, alerts, and audit exports.
• Payment information: billing is handled by Paddle as Merchant of Record. Paddle collects and processes your payment details (card, PayPal, or other methods), billing address, and tax identifiers where required. We do not receive or store your full payment card details — only transaction records, plan status, and license-key entitlements needed to unlock your access.
• Technical data: IP address, browser type, device identifiers, and usage logs used for security, fraud prevention, rate limiting, and service reliability.
• Support communications: messages you send us by email or WhatsApp.

2. How we use it

We use your information to provide and operate the Service, authenticate you, evaluate your agents' actions against your policies, process subscriptions and license keys, prevent abuse and fraud, improve the product, and communicate with you about your account, renewals, and important changes. We do not sell your personal information.

3. Cookies

We use strictly-necessary cookies to keep you signed in, and a consent cookie (cookie_consent) that remembers the cookie choices you make in our banner — both are required for the site to work. With your permission, chosen in the cookie banner on your first visit, we also use analytics cookies to understand which pages are useful, and marketing cookies for advertising and measuring ad performance. If you decline, no analytics or marketing cookies run at all. You can change your choices at any time with the cookie button at the bottom-left of any page, or by clearing cookies in your browser (blocking the session cookie will sign you out).

4. Advertising

We plan to display ads served by Google AdSense. Google and its partners may use cookies (including the DoubleClick cookie) to serve ads to you based on your visits to this site and other sites on the internet. You can opt out of personalized advertising by visiting Google Ads Settings, and out of some third-party vendors' use of cookies for personalized advertising at aboutads.info/choices. If you block cookies, some ads may not load.

5. Sharing

We share information only as needed to run the Service:

• Paddle (Merchant of Record) for payment processing, tax remittance, fraud screening, and invoicing.
• Infrastructure providers — application hosting and databases — bound by contractual confidentiality.
• Authorities, where required by law or to prevent misuse of the Service.

6. Data retention

Account and service data are kept while your account is active. You may request deletion of your account and associated data at any time via the contact details below; we will delete or anonymize it within 30 days, except for records we must retain for tax, accounting, or legal obligations (such as invoices issued by Paddle).

7. Security

We protect your data with encrypted connections (TLS), hashed credentials, secure cookies, rate limiting, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, object to or restrict certain processing, and withdraw consent where processing is based on it. Contact us to exercise these rights; we will respond within 30 days.

9. International transfers

The Service is operated from Belize and hosted on cloud infrastructure that may be located outside your country. By using the Service, you understand your information may be transferred to and processed in other jurisdictions.

10. Changes to this policy

We may update this Policy; material changes will be announced on the site and, for account holders, by email. Continued use after changes take effect constitutes acceptance.

11. Contact

Data controller: Ingenious AI, Orange Walk Town, Belize. Email: avilanatanael640@gmail.com · WhatsApp: +501 669-1053.