Privacy policy
Effective date: November 1, 2026 (UTC)
Who is responsible
30kstrategy LLC, a Florida limited liability company, is responsible for personal information collected on this site and through our authorized integrations. Contact support@agenticui.net.
You must be 18 or older. This site is not a children’s service.
The Terms of use are the contract for the site, accounts, purchases, and our authorized integrations.
What is stored
Accounts store your name, your email, your postal address, and the time the checkbox was accepted. The account host stores a hash of the password. The site does not keep the password. The postal address is line 1, line 2, city, region, postal code, and country.
Sign-up is an email code. An email service sends the sign-up, reset, and email-change codes.
An account with an empty timestamp must accept before a purchase.
Purchases store product, amount, currency, status, and date.
The sign-in session is stored in this browser under the local storage key agentic-ui-auth.
The ChatGPT connection is available only for specifically authorized private owner and reviewer access, not generally to eligible buyers. If you authorize a connection, we receive the tool name and arguments ChatGPT sends to our MCP service and use them to return the requested design-system content. Arguments, including search text, may reflect relevant conversation content or enabled memory. The connection does not provide an API for us to retrieve your full ChatGPT conversation history.
To authorize and secure the connection, we store account, sign-in session, client, request and connection identifiers and security bindings; the permissions you approve; consent, use, expiry and revocation records; and hashes of authorization codes, access tokens and refresh tokens. The connection database stores those hashes, not the original codes or tokens. These records are pseudonymous, not anonymous. We check your account, supporting sign-in session and current eligibility to decide whether each request is allowed. We also use request counts and hashed identifiers to limit abuse and protect the service.
We do not intentionally store tool arguments in OAuth records or application request logs. Worker invocation logging, tracing and Worker log export are disabled for the ChatGPT authorization and MCP service. Provider-held operational, security and audit records are separate from these application records.
Hosts
Supabase hosts accounts, authentication and the database. GitHub Pages hosts the current website, including staging.agenticui.dev. Cloudflare hosts the ChatGPT authorization and MCP service, with Hyperdrive providing its database connection. Vercel hosts our separate existing MCP service. These providers process data needed to host and operate their parts of the service.
For authorized connections, OpenAI sends tool requests to AgenticUI and receives the content and results we return so ChatGPT can answer you. We share your email address with ChatGPT or Claude when you sign in. OpenAI handles information in ChatGPT under its own privacy policy and your ChatGPT settings.
Our providers may process information in the United States and other countries where they operate. We do not promise that all processing stays in the United States.
Selling and advertising
We do not sell personal information and we do not share it for cross-context advertising.
There is no marketing list.
How long
We keep purchase records only as long as tax and accounting require.
During the initial review period, we schedule hourly removal of connection records after their stored expiry or revocation is at least 30 days old. Unlinked authorization requests and rate-limit counters become eligible for removal 24 hours after expiry. Linked requests remain until the related connection is removed and their own expiry threshold has passed. Each run deletes at most 1,000 eligible records and preserves records needed for active connections and their security. The schedule stops at its first run on or after March 15, 2027 at 00:00 UTC. Deletion runs in limited batches, so locks, failures or backlog may delay completion. These periods do not apply to accounts, purchase records, or provider-held logs and backups.
Cloudflare keeps security event records for up to 31 days. We keep exported copies for 7 days. These records include your IP address, browser details, country, network provider, and the page you visited. Only the AgenticUI owner can see them.
Expiry makes a code or token unusable, and revocation stops further access through the connection. Neither action by itself deletes the related records.
Your requests
For access, correction, or deletion, email support@agenticui.net.
You can also contact support@agenticui.net to request connection revocation. Revocation stops further access through that connection; it does not delete your AgenticUI account, purchase records, or conversations and results already held in ChatGPT. Use ChatGPT’s controls for information held there, and contact us for requests about information held by AgenticUI. A support request does not automatically delete accounts or purchases.
Changes
For a material change to this policy, we send notice to the account email, and we change the date at the top.
Contact
Contact support@agenticui.net.