Legal

Privacy Policy

Last updated: July 13, 2026. This policy applies to openforagents.com and the Open for Agents plugin.

Who We Are

Open for Agents is operated by Enoki Limited (New Zealand). If you have privacy questions, email hello@openforagents.com.

What Data We Collect

When you submit an update form, we collect:

Email address
Role/persona selection (optional)
Basic request metadata used for abuse protection

When directory submissions are available, we collect:

Site name and primary URL
Operator email address
Selected categories and declared capabilities
Optional readiness report URL
Optional notes you provide
Validation results and basic request metadata used for abuse protection

Why We Collect It

Notify you about product updates
Segment announcements based on role
Protect the form endpoint from abuse and spam
Review directory candidates before publishing any listing
Maintain, correct, or remove directory listings when operators contact us

Website Analytics

The marketing website uses Plausible Analytics and Google Analytics 4 to measure page views, navigation, referrals, and general site performance. These services may process the page URL, referrer, browser and device information, approximate location, and network identifiers. The Plausible tracker is served through stats.enoki.nz; Google Analytics is provided by Google.

We use analytics reports to understand aggregate website usage and improve the product and documentation. We do not use this analytics data to make automated decisions about visitors or sell it to third parties.

How We Store Data

Signup data is processed by our website and stored in Kit (ConvertKit), our email service provider. We keep subscriber data until you unsubscribe or request deletion.

Directory submission data is stored by the website for review and audit purposes. We keep queued, rejected, removed, and published submission records only as long as needed to operate the directory, prevent duplicate or abusive submissions, and handle correction or removal requests.

Directory Submissions

A submitted listing is not published automatically. If a listing is approved, the public directory may show the site name, primary URL, categories, declared capabilities, readiness or validation URLs, and validation status. Operator email addresses, private notes, admin review metadata, and request metadata are kept internal.

To correct a listing, remove a listing, or ask what directory data we hold for your site, email hello@openforagents.com. We may ask you to verify that you operate the site before changing or removing a listing.

Third-Party Sharing

We share signup data only with providers required to operate the service, such as Kit for email delivery. Website usage data is processed by Plausible Analytics and Google Analytics as described above.

Optional Assistant Processing

When you choose to open and use the visitor-facing Open for Agents Assistant on a configured demo or customer site, your prompts, relevant recent conversation, the names of reviewed site tools, and bounded tool results are sent through the Open for Agents gateway to the configured model provider. Basic IP-derived abuse controls, short-lived session and execution identifiers, token usage, timing, and tool-call counts are also processed to enforce security and cost limits.

The Assistant is optional and does not load or make a model request until you open it. Cart and form changes require an immediate approval tied to the exact tool arguments. Do not put payment, health, government-identifier, password, or other sensitive data in Assistant prompts. Checkout, payment, order placement, and account changes are not supported by the demo Assistant.

For a visitor-approved transaction, the gateway temporarily holds an encrypted review containing the exact values shown on the standalone approval screen. It signs only hashes and identifiers, never the raw form or cart values, and the one-time review expires with the WordPress challenge or is removed immediately after approval or cancellation.

Plugin Data Handling

The Open for Agents plugin is designed to run locally on your WordPress site. Scan results and generated action maps remain on your site unless you explicitly export or share them.

Your Rights

You can request access, correction, or deletion of your personal data by emailing hello@openforagents.com. We process requests in line with applicable privacy law, including the NZ Privacy Act 2020 and GDPR where relevant.

Updates

We may update this policy as the product evolves. Material updates will be reflected by the date at the top of this page.