Privacy Policy

OpenAgents is an open marketplace for agentic workflow packages. This policy explains what information we collect when you use the site, why we collect it, and the choices you have. It applies to everyone who visits or creates an account on OpenAgents, whether you’re browsing the catalog, publishing a package, or buying one.

Information we collect

We collect only what we need to run the marketplace:

• Account profile. When you sign in with GitHub or Google, we receive your name, email address, avatar URL, and the provider’s account id. We use this to create your OpenAgents account and to display your public creator handle.
• Packages you publish. The contents of any package you publish (its openagent.yaml manifest, source files, README, and version history) are stored and made public in the catalog.
• Purchase records. If you buy a paid package, we store a record of the purchase (which package, which account, and the amount) so we can grant you download access and handle support or refund requests. We do not store your card number — Stripe handles payment collection directly; see “Payments” below.
• Server logs. Like most web services, our hosting and database providers automatically log request metadata such as IP address, user agent, and timestamps, for security and debugging.
• Usage counters. We track aggregate download and star counts per package to show popularity in the catalog. These counters are not tied to your identity in anything we display publicly.

What we don’t collect

• We never see or store your payment card number, bank account number, or other financial credentials. All payment processing is handled by Stripe.
• We do not sell, rent, or trade your personal data to anyone, ever.
• We do not run advertising trackers, ad pixels, or third-party analytics scripts that profile you across other sites.

Cookies

OpenAgents uses a single session cookie to keep you signed in. It is required for the site to function and is not used for advertising or cross-site tracking. We do not use third-party ad or marketing cookies.

Third parties we work with

We rely on a small number of infrastructure providers to run OpenAgents. Each only receives the data it needs to do its job:

• Vercel hosts the application and processes request logs.
• Neon hosts our Postgres database, where account, package, and purchase records live.
• Stripe processes all payments and, for creators who sell paid packages, handles Connect onboarding (identity and payout details you provide go directly to Stripe, not to us). Stripe’s own privacy policy governs data you give it directly.
• GitHub and Google provide sign-in. We receive only the profile fields listed above under their standard OAuth consent screens.

Data retention

We keep account and purchase records for as long as your account is active, and afterward for as long as needed to satisfy tax, accounting, or legal obligations (for example, records of a completed sale). Published packages remain in the catalog, including in version history, unless removed under our takedown process or at your request.

Deletion requests

You can request deletion of your account and associated personal data at any time by emailing zwolfe42@gmail.com. We’ll delete what we can while preserving records we’re legally required to keep (such as completed purchase records) and without removing packages you have published that other users depend on, unless you ask us to unpublish them.

Children’s privacy

OpenAgents is not directed to, and we do not knowingly collect information from, anyone under 13 years old. If you believe a child has created an account, contact us and we will remove it.

Changes to this policy

We may update this policy as OpenAgents evolves. We’ll update the “Last updated” date above when we do, and material changes will be posted here.

Contact

Questions about this policy or your data? Email zwolfe42@gmail.com.