Buy-Box Privacy Policy

What this policy covers

Buy-Box is a service operated by Agentic Consulting LLC (“we”, “us”). It lets you store buying criteria that your AI agents can read through the Model Context Protocol (MCP). This policy explains what personal data we collect, how we use and share it, and the choices you have.

Information we collect

Account data. When you sign in with Google, our sign-in provider, Clerk, gives us your name, email address and a unique account ID.

Content you provide. The buy-boxes you create or that your agent saves for you: category names, numbers, lists and free-text notes.

Usage data. Which tools your agent calls, when, and how often, along with standard technical data such as IP address and request logs. We do not log the contents of your buy-boxes in usage logs.

How we use your information

To provide the service: sign you in, store your buy-boxes, and return them to agents you have connected.

To keep the service secure and prevent abuse, including rate limits and per-account limits.

To understand how the service is used and to improve it, including the aggregated and de-identified data described below.

To communicate with you about the service and respond to your requests.

To comply with the law.

Aggregated and de-identified data

We may analyze categories and criteria (for example, which kinds of things people search for and which fields they use) to understand demand and improve Buy-Box. When we do, we remove your name, email and account ID first, and we leave out free-text notes. We use this data only to analyze and improve the service, and we do not try to re-identify it.

Your own buy-boxes are visible to you and to the agents you connect. We access identifiable buy-box content only when needed to support you, secure the service, or comply with the law.

How we share your information

We do not sell your personal data.

We share it with service providers that help us run Buy-Box: Clerk (sign-in), Vercel (hosting) and Neon (database). They process data on our behalf and only as needed to provide their services.

We may disclose information if required by law, to protect our rights or the safety of others, or in a merger or sale of the business.

MCP clients you connect (such as Claude or other AI tools) receive the buy-box content you ask them to retrieve. Their handling of that data is governed by their own policies.

Security and retention

We use reasonable technical measures to protect your data, including encrypted connections and per-account access controls. No system is perfectly secure.

We keep your data while your account is open. When you ask us to delete your account, we delete your buy-boxes and account data from our production systems, except for records we must keep for legal or security reasons. Provider backups may persist for a short period before they expire.

Your choices and rights

You can ask to access, correct, export or delete your data at any time by emailing us. Depending on where you live, you may have additional rights under local privacy law, including the right to object to or limit certain uses and to complain to a regulator. We will respond within a reasonable time.

Please do not put sensitive personal details (such as government IDs, financial account numbers or health information) in your buy-boxes.

Children

Buy-Box is not directed to children under 13, and we do not knowingly collect their personal data.

Changes to this policy

We may update this policy. We will post the new version here with a new date, and for material changes we will give reasonable notice.

Contact

Agentic Consulting LLC. Questions or requests: tyler@agentconsult.ai. See also our Terms of Service at /terms and Support at /support.