This Privacy Policy explains exactly what The Agent Marketplace ("we," "us") collects, why, and what control you have. We try to collect as little as possible. The Service is available at theagentmarketplace.ai.
We store the following, and nothing more:
| Data | Purpose |
|---|---|
| Your email address | To create and identify your account, sign you in, and contact you about your account, purchases, or support. |
| A PBKDF2-SHA256 password hash (with a per-user salt) | To authenticate you. We never store your plaintext password and cannot recover it — only verify it. |
| Your lesson progress & mastery | To save what you've completed, drive the mastery graph and spaced review, and issue credentials. |
| Your purchases | To record which agents you've bought so you retain access (buyer, agent, amount, and the payment reference). |
| Anonymized event analytics | Aggregate, anonymized product events (e.g., a lesson started, an agent run) to understand and improve the Service. These are not used to profile you. |
Internally these live in our application database (Cloudflare D1) as aa_users, aa_progress, aa_purchases, and aa_events.
We do not store your full payment card details. All card data is collected and processed by Stripe, our PCI-compliant payment processor; we only ever receive a payment reference and the amount. See Stripe's privacy policy for how they handle card data. We do not sell your data, and we do not use advertising trackers.
The Service is hosted on Cloudflare (Cloudflare Pages, Pages Functions, and D1). Analytics are provided by Cloudflare Web Analytics / Browser Insights, which are privacy-first and do not use advertising cookies or fingerprinting to track you across sites. Cloudflare also processes standard request metadata (such as IP address) as part of delivering and securing the site.
We use only the cookies needed to run the Service — no advertising or cross-site tracking cookies:
| Cookie | Purpose | Lifetime |
|---|---|---|
aa_user | Carries an anonymous learner identifier so your progress is saved even before you create an account. | 1 year |
aa_session | Keeps you signed in after you authenticate (authentication session). | Session / sign-out |
We do not sell or rent your personal data, and we share it only with the processors needed to run the Service (Cloudflare for hosting/analytics, Stripe for payments).
We keep account data for as long as your account is active or as needed to provide the Service. Purchase records are retained as required for tax and accounting. You can request deletion at any time (below).
The Service is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect data from them.
We may update this Policy; material changes will be reflected by the "Last updated" date above.