agentmail is designed to collect the minimum data needed to operate:
API keys: when you create a paid account, we store your Stripe-generated API key (a random string). We do not store passwords.
Screening queries: we log the subject of each sanctions check (wallet address, name, or country code), the timestamp, and the result. This log is your audit trail and is retained for compliance purposes.
Usage metadata: request count, IP address (for rate limiting), and timestamps. We do not store request payloads beyond the screening subject.
Billing data: handled entirely by Stripe. We never see or store your credit card number.
Analytics
This website uses PostHog (EU-hosted, eu.i.posthog.com) as our processor for product analytics. It records page views and a small set of product events, and stores an identifier in your browser (a cookie and local storage). It is configured not to build a profile for anonymous visitors, and we do not use it to track you across other websites. Blocking eu.i.posthog.com disables it entirely without affecting the site or the API.
What we do NOT collect
We run no advertising or retargeting pixels — no Meta, Reddit, LinkedIn, Google Ads or comparable ad-network trackers — and we do not build or share advertising audiences.
We do not use cross-site tracking cookies. The only browser storage we set is the first-party PostHog identifier described above.
We do not sell, rent, or share your data with third parties.
We do not store the contents of your emails or SMS messages (those are handled by separate inbox services).
Data retention
Screening logs (audit trails) are retained for the life of your account. If you delete your account, we purge your logs within 30 days, unless retention is legally required.
GDPR / CCPA
You can request export or deletion of your data at any time by contacting us via GitHub Issues. We comply with all data subject access requests within 30 days.
Security
All traffic is encrypted via HTTPS (HSTS enforced). API keys are transmitted via headers only, never in URLs. We do not store sensitive payment data (Stripe handles all billing).