Privacy Policy

Last updated: 9 October 2026

This policy explains what personal data agai.works collects, why we collect it, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.

What data we collect and why

We collect personal data in the following ways:

Website Audit request form — when you request a free website audit, we collect your first name, last name, business email address, job title, business name, and website URL. We use this to run your audit, deliver your report by email, and send you occasional updates about agai.works tools and services. The legal basis is legitimate interests and, where you have explicitly opted in, consent.

New tools signup form — when you sign up to be notified about new agai.works tools, we collect your name, email address, and business name. We use this to notify you when new tools launch. The legal basis is consent.

Account creation and login — creating an agai.works account (needed to subscribe, track credits, and access your report history) requires an email address and password, authenticated via our provider, Supabase. We use this to verify who you are, manage your subscription and credit balance, and let you access reports you've previously run. The legal basis is performance of a contract with you.

Per-page analysis — Pro subscribers can request a focused audit of a specific page on their website. We collect the page URL you submit and store the resulting report against your account, along with how many credits it used. The legal basis is performance of a contract with you.

Tone of Voice Audit — when you request a free Tone of Voice Audit, we collect your first name, last name, business email address, business name (optional) and the two page URLs you submit. We read the public text on those two pages, produce your report, store it against your email address so you can see it in your account, and email it to you. We use your details to deliver the report and, with your consent, to send occasional updates about agai.works tools; the legal basis is performance of a contract with you, and consent for the updates.

Persona Audit — when you request a free Persona Audit, we collect your first name, last name, business email address, business name (optional), the two page URLs you submit and, if you choose to give it, a short description of the people you want to reach. We read the public text on those pages, work out who the copy appears to be written for, produce your report, store it against your email address so you can see it in your account, and email it to you. We use your details to deliver the report and, with your consent, to send occasional updates about agai.works tools; the legal basis is performance of a contract with you, and consent for the updates.

Marketing Planner — the Planner turns the recommendations in your reports into a task list. We store those tasks against your account, together with anything you add to them: deadlines, owner names, notes, and the names of team members you enter so they can be suggested next time. Please use first names or job roles rather than personal details about other people. You can delete this information by emailing us. The legal basis is performance of a contract with you.

Subscription and payment — if you subscribe to Pro or purchase a credit top-up, payment is handled entirely by our payment provider, Freemius Inc, who acts as the Merchant of Record for these transactions. We do not see or store your card details — Freemius collects and processes these directly. We receive confirmation of your subscription status and transaction history from Freemius in order to manage your account and credit balance. The legal basis is performance of a contract with you and, for financial record-keeping, compliance with our legal obligations.

Analytics

We use Google Analytics 4 (GA4) to understand how visitors use agai.works. GA4 collects anonymised data about pages visited, time on site, and how you arrived at the site. No personally identifiable information is sent to Google Analytics. You can opt out of GA4 tracking using a browser extension such as the Google Analytics Opt-out Browser Add-on.

Who we share your data with

We use the following third-party services to process your data:

• Brevo (Sendinblue SAS) — we use Brevo to store contact information and send emails. Brevo is based in France and is GDPR compliant. Their privacy policy is available at brevo.com/legal/privacypolicy.
• Supabase, Inc. — we use Supabase to store account details, authentication credentials, critique reports, and credit balances. Their privacy policy is available at supabase.com/privacy.
• Anthropic — we use Anthropic's Claude AI models to generate your website critique and tone of voice reports. The content of the web pages you submit for analysis is processed by Anthropic in order to produce your report. Their privacy policy is available at privacy.claude.com.
• Freemius Inc — we use Freemius to process subscription payments and credit top-up purchases, acting as the Merchant of Record. Freemius collects and stores your payment details directly — we never see or store your card information. Their privacy policy is available at freemius.com/privacy.
• Google Analytics — anonymised analytics data is processed by Google LLC. Their privacy policy is available at policies.google.com/privacy.
• Vercel Inc. — this website is hosted on Vercel's infrastructure. Vercel processes server request logs as part of normal hosting operations. Their privacy policy is available at vercel.com/legal/privacy-policy.

We do not sell your personal data to any third party, and we do not share it with any party not listed above.

How long we keep your data

We keep your contact information in Brevo for as long as you remain subscribed to our emails. If you unsubscribe or ask us to delete your data, we will remove your record within 30 days. Anonymised analytics data is retained by Google Analytics for 14 months. If you have an agai.works account, we retain your account details, credit balance, and report history for as long as your account remains active. If you delete your account or ask us to remove your data, we will do so within 30 days, except where we are required to retain transaction records for financial or legal compliance purposes.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Ask us to correct inaccurate data
• Ask us to delete your data ("right to be forgotten")
• Object to or restrict how we process your data
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, contact us at rich@agai.works. We will respond within 30 days.

Cookies

agai.works uses a single analytics cookie set by Google Analytics (GA4). This cookie is used solely to distinguish unique visitors and sessions for analytics purposes. No advertising or tracking cookies are used. By continuing to use this site you consent to this cookie being set. You can delete or block cookies at any time through your browser settings.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will always reflect the most recent version. Material changes will be communicated by email to subscribers.

Contact

For any questions about this privacy policy or how we handle your data, contact Richard Hillier at rich@agai.works.