Privacy Policy

How AgentVeil handles website, local product, hosted product, payment, and support data.

Last updated: July 15, 2026

1. Who We Are

AgentVeil is operated by Oleg Boiko PR Informacione usluzne delatnosti Novi Sad, an individual entrepreneur (preduzetnik) registered in the Republic of Serbia, PIB 114089208, with registered office at Svetozara Miletica 43, Novi Sad, Serbia.

For privacy questions or requests, contact ob@partlogic.dev.

2. What This Policy Covers

This Privacy Policy explains how we handle data when you use the AgentVeil website, public documentation, public software, local product features, hosted or paid features where configured, support, billing, and payment-related communications.

Third-party services, agents, IDEs, model providers, MCP servers, payment providers, and external websites have their own privacy practices.

3. Public Website Data

When you visit the website, we may receive basic technical information such as page visits, approximate location derived from IP address, browser or device metadata, referring page, timestamps, and similar website usage data.

We use this data to operate the website, understand aggregate usage, improve the site, prevent abuse, and maintain security.

4. Cookies, Local Storage, and Analytics

The website may use privacy-focused analytics to understand aggregate page traffic and basic site usage. The homepage currently uses local storage to remember theme preference.

Analytics and local storage are not used to collect source code, prompts, MCP payloads, secrets, customer evidence, or private agent logs.

5. Contact and Support Data

If you contact us, request access, ask for support, or communicate by email, we may process your name, email address, organization, message content, billing context, and related communications.

Do not send raw secrets, private keys, production credentials, sensitive source code, regulated personal data, or private evidence artifacts through public website forms, ordinary email, or support messages unless we have agreed on a secure channel.

6. Local Product Data

AgentVeil public or local software may generate or store local configuration, approval records, logs, evidence, receipts, hashes, or proof artifacts on your machine or within your configured environment.

Local-only data is not automatically sent to AgentVeil unless you configure a hosted feature, share it with us, or use a feature that requires transmission.

You are responsible for securing your local machine, local evidence, local configuration, credentials, and backups.

7. Hosted or Paid Product Data

Hosted or paid AgentVeil features may process bounded metadata needed to provide the service, such as account or license identifiers, workspace or project identifiers, connector or integration type, action type and family, risk family or policy identifier, decision state, timestamps, resource or payload hashes, idempotency-key hashes, usage and billing counters, error codes, and operational telemetry.

We aim to avoid collecting raw prompts, raw source code, full shell commands, secret values, private keys, full MCP payloads, file contents, full local paths, or signed URLs unless a specific feature or support process requires it and you choose to provide it.

Actions outside configured AgentVeil routes may not be logged, approved, blocked, redirected, or included in AgentVeil evidence.

8. Payment and Billing Data

For paid access, we may process billing contact details, invoice details, payment status, plan, license or account identifiers, payment references, and communications about billing or access.

Payments may be processed by third-party payment providers, including Payoneer or other providers. We do not control their privacy practices.

Do not send card numbers, bank passwords, private payment credentials, or unnecessary financial information directly to us by email.

9. How We Use Data

• to provide, operate, secure, and improve AgentVeil;
• to process access requests, payments, and invoices;
• to provide support;
• to maintain local or hosted evidence features where configured;
• to detect abuse, security issues, and operational failures;
• to communicate with you about the service;
• to comply with legal, accounting, tax, and security obligations.

10. No Model Training

We do not use customer source code, private prompts, private logs, secrets, or private evidence artifacts submitted to AgentVeil support or hosted services to train general-purpose AI models.

If this changes for any optional feature, it must be disclosed separately and require an appropriate opt-in or agreement.

11. Processors and Recipients

We may share data with service providers that help us operate AgentVeil, such as hosting providers, analytics providers, email providers, payment providers, security providers, and professional advisors.

We may also disclose data if required by law, to protect rights and security, or as part of a business transfer, subject to appropriate safeguards.

12. International Transfers

We operate from Serbia and may use service providers in other countries. Your data may be processed in countries different from where you are located. Where required, we use appropriate safeguards for international transfers.

13. Retention

We keep data only as long as reasonably needed for the purposes described in this policy, including providing the service, maintaining records, resolving disputes, meeting legal or accounting obligations, and protecting security.

Local product data retention may be controlled by your local configuration. Hosted usage, billing, and support data may be retained for operational, security, legal, and accounting purposes.

14. Security

We use reasonable technical and organizational measures designed to protect data. No system is completely secure, and we cannot guarantee that unauthorized access, loss, misuse, or disclosure will never occur.

You are responsible for securing your own devices, credentials, agent environments, local evidence, backups, and third-party integrations.

15. Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of certain personal data.

To make a request, contact ob@partlogic.dev. We may need to verify your identity before responding. If you are in the European Economic Area or another jurisdiction with data protection rights, you may also have the right to contact your local supervisory authority.

16. Children

AgentVeil is not intended for children or for consumer household use. Do not use AgentVeil if you are under the age required to enter into a binding agreement in your jurisdiction.

17. Changes

We may update this Privacy Policy from time to time. If changes are material, we will take reasonable steps to notify users, such as posting the updated policy on the website or contacting paid users where appropriate.

18. Contact