AgentWebTestBe AI Ready

Effective August 31, 2026 · Updated October 22, 2026

Privacy policy

This policy explains the information used to provide read-only website audits and monitoring, and the choices available to you.

Scope

This policy applies to Agent Experience Monitor's website, readiness audits, authenticated workspace, monitoring service, and related transactional emails. The service inspects public website content only; it does not sign in to a monitored site, submit forms, or complete purchases.

Information we process

  • Account information, including your first name, last name, email address, authentication metadata, workspace role and invitation status.
  • Website URLs, public page metadata, bounded visible-text evidence, audit results, findings, scores, and monitoring configuration.
  • AWT Copilot questions, replies, report links and quota metadata. Conversations are private from other workspace members; authorized system administrators may review retained conversations and unanswered questions for support, troubleshooting and product improvement. To check the topic and answer a question, the AI provider receives your question and up to five retained question/reply pairs from the selected chat (10 messages, at most 16,000 characters). Answers also use bounded report evidence. Other chats are excluded. Provider response storage is disabled. See the data retention policy for expiry windows.
  • Contact and feedback submissions: type, subject, message, sender identity and workspace. These are stored for support and product review and emailed to authorized system administrators through Resend. Please do not include passwords, payment-card data or other sensitive information.
  • Subscription identifiers, status, and billing-period dates received from Paddle. We do not receive or store full payment-card details.
  • Bounded operational events used to diagnose failures and protect the service.
  • With your permission on the production website, Google Ads click attribution, browser or device measurement data, and a completed readiness-audit conversion event. We do not send your account email to Google Ads, and enhanced conversions are disabled.
  • With the same permission, bounded first-touch campaign fields such as source, medium, campaign, landing path, and external referrer host may be attached to a newly created workspace. We do not store Google or LinkedIn click identifiers in the workspace record.
  • When Google AdSense display ads are enabled, Google and its advertising partners may process your IP address, browser and device information, cookies or similar identifiers, and ad interactions. Advertising preferences are managed separately from Google Ads campaign measurement.
  • A one-way network identifier used for free-audit abuse prevention when that protection is enabled. Raw visitor IP addresses are not stored in the application database for this purpose.

How information is used

We use this information to deliver audits, verify site ownership, schedule monitoring, manage workspace membership and invitations, measure regressions, send requested reports and alerts, administer subscriptions, secure the service, prevent abuse, and investigate operational failures. We do not sell workspace audit reports or account contact details. Consent-based advertising measurement is used only to understand whether an advertisement leads to workspace activation or a completed readiness audit and to improve campaign spend.

Service providers

We use the following providers to operate the service. They process information for the stated purpose under their own contractual and security commitments.

  • Cloudflare: Application hosting, network delivery, DNS, and security controls.
  • Supabase: Authentication and PostgreSQL application data storage.
  • Trigger.dev: Queued and scheduled audit processing.
  • OpenAI: Optional bounded analysis of sanitized evidence; raw HTML is not sent and response storage is disabled.
  • Resend: Transactional report, regression, and operational email delivery.
  • Paddle: Merchant-of-record billing, payment processing, taxes, and subscription management.
  • Google Ads: Consent-based advertising attribution and completed readiness-audit conversion measurement on the production website.
  • Google AdSense and Google Privacy & messaging: Display-ad delivery, advertising consent choices, ad measurement and fraud prevention when display ads are enabled; separate from Google Ads campaign measurement.

Display advertising and cookies

We are preparing to offer Google AdSense display advertising in the workspace sidebar. Display ads remain disabled while site approval is pending. When enabled, third parties, including Google, may store or access cookies and similar identifiers to serve, measure, and protect ads. Depending on your choices and applicable requirements, Google and its partners may personalize ads using visits to this and other websites. We do not include your account email, audit reports, or workspace records in ad requests.

Where consent is required, Google's consent message lets you consent, decline, or manage purposes and advertising partners. You can revisit these choices using the Privacy and cookie settings link that Google provides at the bottom of pages displaying its consent message. Declining display-ad consent does not prevent you from using your workspace. The separate Google Ads measurement controls below do not grant or withdraw AdSense consent.

Learn how Google uses information from partner sites and manage personalized advertising through Google My Ad Center. Other advertising networks offer choices at YourAdChoices. Blocking or deleting cookies in your browser may affect stored preferences.

Retention and deletion

Product evidence is kept for defined periods and then removed from normal application access. Full details, including the treatment of readiness audits, monitoring history, site deletion, and billing records, are in the Data Retention Policy.

Your choices and rights

You can remove a monitored site from your workspace, manage renewal through Paddle, or ask to access, correct, export, or delete personal information associated with your account. Some subscription, transaction, security, or aggregate usage records may be retained where required for legal, accounting, fraud-prevention, or operational purposes.

Google Ads measurement is off until you accept it. You can change or withdraw that choice below at any time. Your choice is stored in this browser.

Security and international processing

We use environment isolation, access controls, encrypted transport, bounded evidence, and server-only secrets to reduce risk. No internet service can guarantee absolute security. Our providers may process information in countries other than yours, subject to their applicable safeguards.

Contact

Send privacy or data-rights requests to privacy@agentwebtest.com. We may need to verify account or domain ownership before completing a request.