Privacy
Agency0s ID is the sign-in service for Agency0s products and for organisations that use Agency0s as their identity provider. This page says exactly what it stores and why.
What we store
- Your email address — it is your identity. We send sign-in links to it and nothing else unless you ask.
- Passkeys — the public half of a credential your device creates. We never see the private half.
- Sessions — one record per signed-in device: a random token, the device's user agent, its IP address, and timestamps. Sessions expire after 30 days of inactivity; you can end them at any time from your account.
- A security log — sign-in attempts, session changes, and administrative actions, with IP address and user agent, kept for 180 days for abuse investigation, then deleted.
- Consents — which version of this page and the cookie page you accepted, and when.
Who else sees it
- Bird delivers our email. It receives your address and the message.
- Cloudflare Turnstile screens the sign-in form for automation. Cloudflare receives your IP address and browser signals for that check.
- DigitalOcean hosts the database; Vercel hosts the service. Both process data on our behalf under their terms.
- Organisations that use Agency0s ID to sign you in receive your email address and a stable identifier — never your sessions or passkeys.
What we do not do
No advertising, no tracking pixels in email, no sale or sharing of your data for marketing. Sign-in emails are plain messages with one link.
Your choices
Remove passkeys and end sessions from your account page. To delete your Agency0s ID, or for any privacy question, write to contact@agency0s.com.