Privacy Policy
Last updated October 15, 2026
Draft for legal review. This document describes how the service actually works, but it has not been reviewed by a lawyer. Bracketed items such as [Company legal name] and [Governing jurisdiction] must be filled in before launch.
This policy explains what [Company legal name] ("we") collects when you use DM My Agent, why, and what control you have. The short version: we hold the minimum needed to relay paid messages, the Lister's real address is never shown to Senders (Senders' email addresses are shown to the Lister), and we don't sell data or run advertising trackers.
What we collect
Listers
- Your sign-in email and the inbox address your listing delivers to.
- Profile details you provide: handle, display name, photo URL, title, company, location, industries, interests, bio, price, and rules. These are shown publicly on your profile page.
- Social accounts you choose to verify (X, LinkedIn, GitHub): the username, display name and profile link, shown as a badge. When you verify by signing in, the provider's access token is used once to read your username and is never stored.
- Payout status from Stripe. Stripe collects your identity and bank details directly; we only receive the account ID and whether it can accept payments.
- OAuth grants and API tokens for connected agents, stored as hashes or encrypted records.
Senders
- Your email address (shared with the Lister you message), the message you write, and any attachments.
- Payment status from Stripe. Card details go straight to Stripe; we never see or store card numbers.
- A hashed form of your email for rate limits and blocks, and your IP address for abuse prevention.
Everyone
- Basic request logs (time, path, status, IP address) kept by our hosting provider for security and debugging.
- The marketing pages set no cookies and load no third-party scripts, fonts, or analytics. The sign-in and owner review screens use cookies only to keep you signed in and to protect forms.
How messages are processed
- Addresses. Each side writes to an alias at dmmyagent.com. The Sender's email address is shown to the Lister in every relayed message. The Lister's real address is replaced with an alias and never shown to the Sender.
- Sanitizing. The relay builds a new plain-text message rather than forwarding the original. Tracking pixels and remote images are removed, links are unwrapped, and location and camera metadata is stripped from image attachments. Unsafe file types are dropped.
- Triage. Messages are classified automatically to tag intent, summarize, and suggest a reply. Messages are never filtered for topic; only threats and illegal content are held for the Lister's review. This runs on rules inside our service and, when enabled, on Cloudflare Workers AI models. Message text is not used to train models.
Why we use it (legal bases)
- To provide the Service you asked for: relaying messages, holding and capturing payments, and paying out Listers (contract).
- To prevent fraud, spam, and abuse, and to keep the Service secure (legitimate interests).
- To meet tax, accounting, and legal obligations (legal obligation).
Who processes it
| Provider | Purpose |
|---|---|
| Cloudflare, Inc. | Hosting, database (D1 and KV), email routing and sending, Workers AI triage |
| Stripe, Inc. | Card payments, holds, refunds, and Connect payouts |
| X Corp., LinkedIn Corporation, GitHub, Inc. | Only if you verify a social account: confirming the account is yours |
The Lister you message receives the content of your message under an alias. We don't sell personal data or share it with advertisers. We disclose data to authorities only when legally required.
How long we keep it
- Relay aliases stop working after the thread closes and a short grace period (14 days by default).
- Messages and their payment records are kept while the listing exists, so both sides can see history and so we can handle disputes and meet accounting requirements. [Retention period for closed messages, to be confirmed].
- One-time sign-in codes expire within minutes. Expired OAuth grants are purged automatically.
Your rights
Depending on where you live, you can ask to access, correct, export, or delete your data, or object to some processing. Email [privacy contact email]. We may need to keep payment records that the law requires us to retain. You can also complain to your local data protection authority.
International transfers
Cloudflare and Stripe process data in many countries. Where required, transfers rely on standard contractual clauses or an equivalent safeguard.
Children
The Service is not for anyone under 18, and we don't knowingly collect their data.
Changes and contact
We'll post updates here and email Listers about material changes. Contact: [Company legal name], [Registered address], [privacy contact email].