Privacy Policy

Who we are

Publisher / controller: Corbin Vachal (Individual), doing business as AgentRender. Nebraska, United States. Product site: agentrenderapi.com.

Contact: hello@agentrenderapi.com (subject prefix [AgentRender Support]).

Data we collect

• Sign-in data: when you connect AgentRender through ChatGPT or another OAuth client, our sign-in provider Auth0 (and Google, if you choose Google) shares your email address, whether it is verified, and an account identifier with us. We use them to create and recognize your AgentRender account and to match a website purchase to that account.
• Account and key data: account email, plan, status, and payment fulfillment identifiers from Stripe. API keys are stored on our server for authentication. Full keys are shown once at issuance and may be emailed to you; treat them as secrets.
• Requests you make: the page URL and options you submit (viewport, format, full page, and similar).
• Request log: for every API and MCP request we record the time, your IP address, user agent, the endpoint and HTTP status, response time, the tool used (screenshot, pdf or extract), the MCP client name and version, the website host you asked us to render (host only, not the full URL), your plan, and a one-way hash of your API key or sign-in identifier (never the key itself). For free-key requests made on our website we record the email domain.
• Usage counters: renders used per account per month, keyed by a hash of the key.
• Waitlist fields you submit (email, intended use, plan interest, expected renders, notes).
• Support emails and Stripe payment confirmations (Stripe handles card details; we never see full card numbers).

Tool outputs

• Screenshots and PDFs are saved on our server so we can give you a download link. Anyone with the link can open the file until it expires, so treat links like the file itself.
• Extract results (title, meta description, headings, links, main text and similar) are returned in the response and not stored.
• Render receipts (captured URL, final URL, capture time, file hash) are returned with each result so you can tell which version of a page was used.

Retention

• Screenshot and PDF files: download links expire 60 minutes after the render, and the files are deleted automatically shortly after (normally within about 70 minutes).
• Extract results: not stored.
• Request log (including IP addresses): 90 days, then deleted automatically.
• Usage counters: kept while your account is active.
• Account, sign-in and key records: until you ask us to delete your account or we close it.
• Hosting provider logs (Fly.io): short-lived operational logs; we don't export or archive them.
• Billing records: kept as required for tax and accounting.
• Waitlist data: until you ask us to delete it.
• Support email: kept while your request is open and afterward as business records; deleted on request where feasible.

How we use data

To run renders, sign you in, enforce plan limits and rate limits, prevent abuse and SSRF attacks, keep the service secure, fix problems, handle billing and support, and measure overall usage. We do not sell personal data or use it for advertising.

Who receives it (subprocessors)

• Fly.io — API hosting and rendering.
• Auth0 by Okta — sign-in.
• Google — only if you sign in with Google.
• Stripe — payments and subscriptions.
• Resend — email sending and our support inbox.
• Cloudflare — website hosting and DNS.
• Formspree — waitlist form, if used.

Websites you ask us to render receive a normal request from our servers, not from you.

Security

• TLS for site and API traffic.
• Treat API keys and download links as secrets — do not paste them into public chats or repositories.
• Public URLs only: private networks, localhost, link-local and cloud metadata addresses are blocked (SSRF protections).

Your controls

Disconnect AgentRender in ChatGPT at any time. Email hello@agentrenderapi.com to access or delete your account, sign-in record, usage counters, or the request-log entries tied to your account or IP address; we'll verify the request and reply within 30 days.

Children

AgentRender is not directed to children under 13. We do not knowingly collect personal information from children under 13.

Changes

We may update this page from time to time. The “Last updated” date will change when we do. Continued use of AgentRender after an update constitutes acceptance of the revised policy.