Privacy Policy
Last updated:
1. Introduction
The operator of AgentDoor (“we”) treats the protection of personal data as a core responsibility and complies with Japan's Act on the Protection of Personal Information (APPI) and other applicable laws, including the GDPR where relevant. This policy describes how the site handles personal data. Today the site does one thing: accept early-access (waitlist) sign-ups.
2. What we collect
- Your email address, only when you submit it to the waitlist form.
- A source tag recording which page and language the sign-up came from (e.g. home-en, compare-ramp-vs-expensify-en).
- A timestamp of when you signed up.
- How you first arrived (utm parameters in the URL, the referring site's URL, the first page path you saw, and when). Recorded together with a waitlist sign-up, door creation, or buyer request. It identifies no individual.
- We do not buy, enrich, or append data from other sources, and we collect no name, company, or phone number.
3. How we use it
- To contact you when AgentDoor opens for early access.
- To understand which content is useful, by aggregating the source tag and first-touch source.
- We send no newsletters or marketing sequences, and we do not sell or share the list.
- Legal basis (where GDPR applies): your consent, given by submitting a form, and performance of a contract; consent is withdrawable at any time (section 6).
4. Subprocessors
We entrust personal data to the processors below only to the extent necessary to run the site. We do not otherwise disclose personal data to third parties except with your consent, where required by law, or to protect life, body, or property.
| Processor | Purpose | Location |
|---|---|---|
| Supabase, Inc. | Waitlist (email) database storage and authentication | United States (data stored in the Tokyo region, ap-northeast-1) |
| Resend (Plus Five Five, Inc.) | Email delivery (waitlist confirmation and operator notification, door-owner answer notifications) | United States |
| Vercel, Inc. | Website hosting / analytics (Vercel Web Analytics, cookieless) | United States |
| Stripe, Inc. | Payment processing for paid plans (from launch; no payments are accepted today) | United States |
| Anthropic, PBC | AI response generation for the door feature (from launch; what is sent is the answer content, under a no-training configuration) | United States |
| Google LLC | Traffic analytics (Google Analytics 4). Loaded only after cookie consent | United States |
| Microsoft Corporation | Behavioural analytics for site improvement (Microsoft Clarity: session recordings and heatmaps). Loaded only after cookie consent | United States |
5. International transfer and retention
As shown above, personal data may be transferred to Supabase, Vercel, Google, Microsoft (all US entities) and is handled under their data-processing terms. Waitlist data is kept until AgentDoor launches and we have contacted you, or until you ask us to delete it — whichever is first. If the product does not launch, the list is deleted.
6. Your rights
You may ask us to disclose, correct, or delete your data, to stop using it, and to withdraw your consent. Under the APPI and, where applicable, the GDPR, you may also lodge a complaint with a supervisory authority. Because the only identifier we hold is your email address, a request from that address is sufficient to identify you; we will action deletion requests promptly.
7. Cookies and analytics
- Vercel Web Analytics measures aggregate traffic. It is cookieless and builds no per-visitor profile.
- One functional cookie (NEXT_LOCALE) remembers your English/Japanese choice. It holds no personal data.
- The tags for traffic analytics (Google Analytics 4) and behavioural analytics (Microsoft Clarity: session recordings and heatmaps) load only if you choose "Accept" on the cookie banner shown on your first visit. If you do not accept, these tags are never loaded and set no cookies. You can withdraw consent at any time via "Cookie settings" in the footer.
- We set no advertising cookies.
Email we send
- Joining the waitlist triggers one confirmation email (transactional).
- At launch we send one announcement email (marketing). We send no other promotional email.
- Every list email carries an unsubscribe link. Opt-out requests are authenticated by a signed link, so nobody can unsubscribe an address that is not theirs.
- After you opt out we keep the record of the opt-out and exclude you from all future sends. The row is retained as evidence of consent and its withdrawal; ask us if you want it deleted outright.
- Email delivery is handled by Resend on our behalf.
8. Changes to this policy
If what we collect or how we handle it changes, we update this policy and the date above. The revised policy takes effect when posted.
Contact: contact@agent-door.com