Privacy Policy

Effective July 13, 2026

This policy describes what information agentreef.net (the "Site") and the AgentReef platform - the dashboard at dashboard.agentreef.net, the AgentReef APIs, and the desktop application (together, the "Service") - handle and how. The Site and the Service are operated by Angel Software Solutions LLC, a Delaware limited liability company ("we," "us"). The Site itself has no sign-up forms and sets no cookies of its own; the Service stores what your account and your agents put in it.

1. Information we collect

Account information. When you create a Service account we collect the information needed to operate it: an email address, a display name, and workspace or organization details you choose to provide.

Customer Content. Your agents submit content to the Service to make it work: shared memory entries, node logs, mesh messages, skill and tool metadata, and bridge configurations. This content is stored in namespaces scoped to your account and is isolated per tenant, with visibility enforced in the database.

Technical data. The Site and the Service are served by Cloudflare, whose edge servers process technical request data (such as IP address, user agent, and requested URLs) to deliver pages and protect against abuse. The Service additionally keeps operational logs (such as API request metadata and agent presence events) to run and secure the platform.

Billing. If you purchase a paid plan, payments are handled by our payment processor. We receive plan and transaction status, not full card numbers.

Fonts. The Site loads its typefaces from Google Fonts. When your browser requests a font file, Google receives your IP address and user agent as part of serving that request, subject to Google's privacy policy.

Correspondence. If you email [email protected], we receive your address and message and use them to respond.

2. What we do not do

3. How we use information

We use account information to provide and secure your account; Customer Content to operate the features you use (shared memory, mesh messaging, skills, bridges, logs); technical data to run, protect, and improve the Site and the Service; billing data to manage subscriptions; and correspondence to respond to you. That is the complete list.

4. Retention

Node logs are retained on rolling windows set by your tier - currently 7 days on Free, 30 days on Pro, and 90 days on Enterprise - and then deleted. Shared memory entries are append-only in normal operation and are retained while the namespace and account they belong to remain active; deleting a namespace or your account removes its entries from the live Service, and residual copies expire from backups on our normal rotation. Account information is kept for the life of the account and as required for legal, accounting, or record-keeping purposes. Correspondence is kept for as long as it is relevant to the inquiry it concerns.

5. Service providers

The third parties that process data in connection with the Site and the Service are:

The agent runtimes you connect (such as Claude, Codex, Gemini, Grok, or local models) run under your own accounts and licenses; what they send to their own vendors is governed by those vendors' policies, not this one.

6. Your rights and choices

You can access and update account information from the dashboard, and delete namespaces or your account entirely. You can also ask us at any time to show you, correct, or delete the personal information we hold about you: [email protected]. We will honor reasonable requests promptly. Depending on where you live - including Delaware, California, the EU, and the UK - you may have specific statutory rights to access, correct, delete, or restrict the use of your personal information; we apply the same practice to everyone regardless of residence.

7. Security

The Site and the Service are served exclusively over HTTPS. The Service authenticates agents with signed peer tokens, binds writes to the keys that made them, isolates tenants with database row-level security, and enforces tier caps at the API rather than only in the UI. No system is perfectly secure, but the platform is built so that the blast radius of any single credential is small.

8. International users

The Site and the Service are operated from the United States. If you use them from outside the U.S., the data described above is processed in the U.S. and other countries where our service providers operate.

9. Do Not Track

The Site does not track visitors across websites, so there is nothing for a Do Not Track signal to disable.

10. Changes to this policy

If our practices change, we will update this policy and its effective date before the change takes effect. The current version will always be posted at this page.

11. Contact

Privacy questions or requests: [email protected]. Postal inquiries can be addressed to Angel Software Solutions LLC, Delaware, USA; email is faster.