This is a plain-language pilot policy, not legal advice.

Privacy Policy

Last updated 10 November 2026

The short version: we keep enquiries for 12 months and then delete them. You can delete your whole account and everything in it yourself, in Studio under Settings. Anyone else can ask us to access, correct or delete their data with the request form below.

Who is responsible

The Agentlane pilot operator, based in Switzerland, is responsible for personal data processed in this pilot (the “controller” under the Swiss Federal Act on Data Protection, or nDSG (also called the FADP), and, where they apply, the EU/UK GDPR and the Tanzania Personal Data Protection Act, 2022).

To contact us, use the details on the Support page.

What we collect

We only collect what we need to run the service:

• Your workspace. If you create a workspace, we store an identifier for you and a hash of your owner key. We never store the key itself. An email address is optional. If you add one, we store it, and whether it has been confirmed.
• How you sign in. With a passkey (Face ID, fingerprint or device PIN) we store only the passkey’s public key, its identifier and a use counter; your face, fingerprint and PIN never leave your device. With email and password we store your email (lower-cased) and a salted, slow hash of the password, never the password. An optional backup code is stored only as a hash. We cannot send emails yet, so there is no password reset by email: you reset with a backup code, your recovery key or a passkey.
• A session cookie. When you sign in, we set a cookie named al_session. It is HttpOnly, Secure (on HTTPS) and SameSite=Strict, and it lasts 30 days or until you sign out. We store only a hash of the session token, plus when it was created and when it expires.
• Sign-in links. If email sending is set up and you confirm an email, we may send a short-lived sign-in or confirmation link. We store a hash of that token, the email, its purpose and its expiry.
• Business and offer data. The business name, website, type, public slug, offers, prices, source pages and the evidence used to check a price. You can also add a notification email, a phone number and a WhatsApp number. Your phone and WhatsApp numbers are shown publicly (as Call and Chat on WhatsApp buttons, and to AI assistants) only if you tick “show on my public page” and your website has been checked (see “Proving a website is yours”). If you change a number, the buttons are hidden until you check your website again; otherwise the numbers stay private. An enquirer may add an optional phone number, which goes only to the business. We may suggest contact details found on your public website; we never apply them unless you choose to.
• Pages we read. When you ask us to read a website, we fetch public pages (robots.txt is respected; at most 12 pages). We store the page address and the offers, contacts and check results we found — not the full page. We also store a short fingerprint of the page text so we can re-check prices later.
• Enquiries. When someone (or an AI assistant, with their details) sends an enquiry, we store: name, email, preferred date, number of people, optional quantity or nights, free-text notes (up to 2,000 characters), the offer they asked about, an indicative total if one can be calculated, the time, the channel (the website or an AI assistant), and a hashed network address. We do not store the raw IP address.
• Notification copies. If a notification email is prepared, we keep a copy in an outbox log (recipient, subject and body, and whether it was sent).
• Technical and security data. We keep short-lived rate-limit counters keyed by a hashed network address, so we can slow down abuse. Cloudflare, which hosts the service, may also keep short technical logs needed to run and protect it.

We do not use advertising cookies or analytics cookies.

• Website check. To prove a website is yours, we give you a short code. We store the code and whether the check passed (and by which method, and when). The check fetches your own website to look for the code; nothing else is stored from that fetch.
• Reports. If someone presses “Report this page”, we store the reason they wrote (up to 500 characters), the time, and a hashed network address. We do not ask for a name or email; if the reporter chooses to add a contact detail (up to 200 characters), we store that too. A page is paused automatically when several independent reports (from different networks) arrive, 3 for an unchecked page and 5 for a checked one, until we have looked at it.
• Data requests. If you use the request form below, we store your email address, the kind of request, your message, the time and a hashed network address, so we can answer you.
• Human check. Forms for sign-up, previews, enquiries and data requests may use Cloudflare Turnstile to tell people from bots. Cloudflare may process technical signals from your browser for this. See Cloudflare’s privacy policy.

Proving a website is yours

A business page is shown to the public, to search engines and to AI assistants only after the owner has proven that they control the website, by putting a code we give them on that website (a text file at /.well-known/agentlane.txt or a meta tag on the home page). Until then the page is not listed anywhere, and phone and WhatsApp buttons are not shown. Confirmation by email at the website’s own address is planned but not available yet.

How we use it

• to provide your workspace, import offers, publish only the offers you approve, and keep the public catalogue up to date;
• to re-check imported prices about every six hours and to pause an offer if its price has left the source page;
• to store enquiries and show them to the business, and to email them when that is set up and the address has been confirmed;
• to sign you in, keep you signed in, and protect the service (including rate limits);
• to reply to support requests and to meet our legal duties.

We do not sell your data. We do not use enquiry content to market to end customers.

Why we are allowed to

Under Swiss law we process data for the purposes above. Where the GDPR applies, and in the same spirit under the Tanzania Personal Data Protection Act, 2022, we rely on:

• A contract (or steps to enter one): running your workspace, publishing approved offers, and delivering enquiries.
• Legitimate interests: keeping the service secure, applying rate limits, re-checking prices, and running this pilot in a responsible way. We balance this against people’s rights.
• Consent, where you choose to give an optional email or ask for a sign-in link. You can withdraw consent at any time; that does not affect processing already done.
• A legal duty, if we are required to keep or disclose information.

Hosting and AI

Agentlane is hosted by Cloudflare, including Cloudflare Workers and a Cloudflare D1 database. Data may be processed in Switzerland, the EU, the UK, the United States or other countries where Cloudflare operates. Cloudflare acts as our processor. Transfers are protected by Cloudflare’s contracts and, where needed, standard contractual clauses or an equivalent safeguard.

When you import a website and Cloudflare Workers AI is available, we may send up to 14,000 characters of the page’s public text to Cloudflare Workers AI, so it can help us find offers. We then check those suggestions against the page text. We do not use this to train a model of our own. Cloudflare’s terms for Workers AI also apply. If the AI service is unavailable, we use a simpler on-service reader instead, and the page text is not sent to the AI service.

Who we share data with

• The public and AI assistants, but only after you go live, and only approved, current offers (and your phone or WhatsApp number, only if you chose to show it). Drafts stay private.
• The business, for enquiries sent to that business. If a notification email is confirmed and sending is set up, the enquiry is also emailed there.
• Cloudflare, as our host and, when used, AI provider, only to run the service.
• Authorities, if the law requires it.

We do not share data with advertisers.

How long we keep it

• Enquiries: 12 months after they were sent, then deleted automatically.
• Notification copies (the outbox log): 90 days, then deleted.
• Reports about a page: kept while open; closed reports are deleted after 12 months.
• Data requests: finished requests are deleted after 24 months.
• Offers: an offer is deleted 12 months after its “valid through” date has passed.
• Private previews (the prices we read before you create an account) are deleted after 24 hours if you do not claim them.
• Workspace, business and offer data is kept while the workspace exists, until you delete it.
• Delete my account and data: in Studio, open Settings and press “Delete my account and data”, then confirm. This immediately deletes your account, your businesses and pages, offers, enquiries, notification copies, import traces, reports about your pages and your sign-in data (passkeys, password, backup code, sessions). All that stays is a record, with no personal details, that a deletion happened.
• Anyone else (for example someone who sent an enquiry) can use the request form below to ask us to delete or correct data about them.
• Backups: our database has Cloudflare’s point-in-time recovery (D1 Time Travel), which keeps changes for a limited period. Deleted data can therefore remain in that recovery history until it ages out. If we ever restore from it, we repeat any deletions made since.
• Sessions expire after 30 days, or sooner if you sign out.
• Sign-in and confirmation links expire after a short time (15 minutes for a sign-in link, 24 hours for an email confirmation).
• Rate-limit counters cover short windows (minutes or up to an hour).

Cookies

The only cookie Agentlane sets is the session cookie described above. It is necessary to keep you signed in. We do not set advertising or analytics cookies. You can clear cookies in your browser; you will need to sign in again.

Your rights

Under the Swiss nDSG (FADP), under the GDPR where it applies, and under the Tanzania Personal Data Protection Act, 2022 where it applies, you can ask to:

• access the personal data we hold about you;
• correct data that is wrong;
• have data deleted, within the limits of the law;
• receive a copy of data you provided, in a common format;
• object to certain processing, or restrict it;
• withdraw consent, where we rely on consent.

To use these rights, use the request form below, or press “Delete my account and data” in Studio if you are an account holder. We answer within 30 days, at the email address you give us. You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) at edoeb.admin.ch. If the GDPR applies to you, you may complain to your local supervisory authority. If the Tanzania Personal Data Protection Act, 2022 applies to you, you may complain to Tanzania’s Personal Data Protection Commission.

Ask about your data

Children

Agentlane is for business owners and is not directed at children. We do not knowingly collect personal data from children.

Changes

If we change this policy, we will update the date at the top. If a change is significant, we will try to give reasonable notice.