Policy
Privacy
This website collects nothing. This page states what we hold when you write to us, for how long, and who sees it.
We use no forms, no cookies, no analytics, and no third-party content.
Our test sessions declare AgentJourneyLab/0.1. Site owners can stop a public test: read the research boundary or write to research@agentjourneylab.com.
This website
This website collects nothing
These are static files. There are no forms, no cookies, no analytics, no third-party content, and no scripts.
Host logs
Host logs
Our web host can record an IP address and a page address in its server logs. We do not use these logs to build a profile.
Email that we receive
When you write to us we hold your email address, your message, and any detail that you send. We use it for four purposes only: to answer you, to write a scope, to do paid work, and to keep the records that tax and accounting rules require.
Retention
Retention
We hold enquiry email for about 12 months after the last message. We hold paid-work records as long as tax and accounting rules require. We delete other material on request.
Evidence retention
How long we hold test evidence
These are the product defaults for paid work. A customer agreement can set a shorter period. A longer period needs a written purpose and an approval.
| What we hold | How long we hold it |
|---|---|
| Synthetic identity values | Deleted after the run, and no later than 24 hours. |
| Raw browser evidence | Deleted 14 days after the related report, by default. The maximum is 30 days from capture, and a longer period needs a new approval. |
| Structured step evidence | Held through the monitoring month. Then deleted no later than 30 days after the monitoring ends. |
| Agent Journey Lab final report copy | Deleted no later than 90 days after the service ends. |
These are service defaults. They are not a compliance statement and they do not replace your engagement terms. We do not claim encryption at rest, because that work is open. Read the security page for the deployed controls and the open work.
Providers
Model providers and subprocessors
We name only the parties that we can confirm today: our email provider and our web host, which process email and serve these static files. We name no other subprocessor here.
Before a provider-backed run, the written scope states the exact model provider, the data that we send, the retention setting, the training setting, the regions, and the subprocessors. You approve them before the run starts. Provider-backed customer execution stays disabled until the readiness and authorization gates pass.
Seller
Seller and invoice
We identify the legal seller, the jurisdiction, the invoice details, and the applicable tax treatment in the written engagement terms and on the invoice, before you pay.
Who sees it
Who sees it
Our email provider and our web host process this data for us. We do not sell data. We do not share data for advertising. We do not publish anything about a named site without written permission.
Your choices
Your choices
You can ask what we hold, ask for a copy, ask for deletion, or ask us to exclude your domain from public research. Write to us and we confirm in writing.