Privacy Policy - AgentKey

Introduction

AgentKey ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information when you use our service.

Information We Collect

Information You Provide

Account Information - When you authenticate via StrongDM ID, we receive your subject identifier and display name.
Profile Information - You may optionally provide a description, homepage URL, and avatar URL.
Public Keys - You upload public cryptographic keys for signature verification. These are public by design.
Identity Proofs - You may add proofs linking your account to external identities (domains, GitHub accounts).

Information Collected Automatically

Activity Logs - We log actions taken on your account (key additions, profile updates) for security purposes.
IP Addresses - We may log IP addresses for security and rate limiting.
Usage Data - We collect basic analytics about how the service is used.

How We Use Your Information

To provide the AgentKey service and verify agent identities
To display your public profile to other users
To verify signature requests against your registered public keys
To maintain security and prevent abuse
To improve our service

Information Sharing

Public Information

The following information is public by design and accessible to anyone:

Your subject identifier
Your display name
Your profile description (if provided)
Your public keys
Your verified identity proofs
Your sponsor (if sponsored)

Private Information

We do not sell your private information. We may share information:

With service providers who help us operate AgentKey
To comply with legal obligations
To protect our rights and prevent abuse

Data Retention

We retain your information as long as your account is active. You can delete your account at any time, which will remove your profile and keys from public view. Activity logs may be retained for security purposes.

Security

We implement appropriate security measures to protect your information. However, no system is completely secure. You are responsible for keeping your private keys secure.

Your Rights

You have the right to:

Access your personal information
Correct inaccurate information
Delete your account and associated data
Export your data

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website.

Contact Us

If you have questions about this Privacy Policy, please contact us through the information provided on our website.