Effective October 26, 2026
Privacy policy
This policy explains what happens to information when you visit the Agnostify website (operated by Case Media Company LLC, Los Angeles, California), sign up for a code, request a website and AI search audit, book a call, use the optional AI intake, or make an agreed payment. It covers agnostify.com only.
What this site does not do
Agnostify sets no cookies of its own, which is why there is no cookie banner. The site runs no advertising pixels, builds no advertising profiles, and never sells personal information. Fonts are served from our own domain, so opening a page sends nothing to a font service. Apart from the Vercel and PostHog analytics scripts described below, the only third-party code a page embeds is the Cal.com calendar on the booking page, which may keep its own storage inside that calendar under Cal.com’s privacy terms.
Hosting and analytics
The site is hosted by Vercel. Like any web server, it receives the technical details of each request (your IP address, browser type and the pages you ask for) and keeps short-lived logs to run and protect the service. We measure traffic with Vercel Web Analytics, which is cookieless: it identifies a visit by a hash of the request that is discarded after 24 hours, records the page, the referring site, approximate location, device type, operating system and browser, and never follows you across other websites. A few actions, such as starting a booking, choosing a starting point or opening a price, are counted as events that carry the page or the option chosen, never anything you typed.
We also use PostHog, an analytics service, to see how visits move through the site. For each page it records the page, the site or the campaign labels (source, medium and campaign name) that brought you there, how long the page stayed open and how far down you scrolled, the links and buttons you click and their labels, the page where the visit ends, and the steps of the audit you reach, such as starting a scan, seeing the results, asking for the Free Preview, starting checkout or booking a call, under a reference code that does not contain your details. It also records the identification string your browser sends (which names your browser, its version and your operating system), your device type, screen and window size, language setting and time zone. A code signup or a booked call is counted as an event that carries none of the details you entered.
PostHog runs here without cookies or other browser storage. To tell visits apart, PostHog’s servers combine your IP address, your browser details, our site’s address and a key that changes every day into a one-way code, so the same visitor on two different days counts as two visitors. The IP address is removed before the visit is stored and is not used to work out your location. We never send PostHog the name, email address, phone number, company name or website you give us, or anything you type into a form, we do not record your screen, and we do not use PostHog to find out who you are or to follow you across other websites. Before anything leaves your browser, page addresses are cut down to the page and its campaign labels, and links to other sites to their domain. Campaign labels are copied from the link you followed, after anything that looks like an email address or phone number is removed. If the link carried an advertising click code, only the fact that it did is kept, not the code. These requests pass through our own domain on the way to PostHog, which processes the data for us under a data processing agreement and stores it in the United States.
When an audit is paid for, our server tells PostHog that a payment happened, with the price, the campaign labels and the referring site’s domain the visit arrived with, under a reference code that does not contain your details.
To turn PostHog analytics off in this browser, use the button below. It turns off PostHog only; Vercel’s cookieless traffic count described above keeps running. The choice is kept in this browser until you clear its storage. If your browser sends a Global Privacy Control or Do Not Track signal, PostHog does not load at all.
Do Not Track and Global Privacy Control
If your browser sends a Global Privacy Control or Do Not Track signal, the PostHog analytics described above does not load. Vercel Web Analytics is cookieless, does not follow you across other websites and runs the same way for every visitor. We do not sell personal information or share it for cross-context behavioral advertising, so there is no sale or sharing for these signals to stop.
Storage in your browser
A few pages remember things in your own browser, and nothing there reaches us unless you send it. The code signup remembers that you signed up, so it stops asking, and keeps the reference it needs to attach a mobile number later. The services you add to your project are kept in this browser too; if you then open the AI intake, that list is sent with your first message so the conversation starts from what you picked. The booking brief you prepare before a call keeps a draft in this browser tab that expires 30 minutes after the last save and is cleared when a booking is reported. The site also keeps two markers that stop an intro animation replaying in the same session. If you turn off PostHog analytics, this browser remembers that choice. The audit page remembers your audit in this browser so you can come back to your results, and whether it has already shown you its one-time offer. Free-text answers are never placed in our site URLs or analytics events. Clearing your browser storage removes all of it.
The discount code signup
If you enter an email address for a code, we store the address, the page you signed up from and the time as your consent record, and send one confirmation email. Nothing else is sent until you confirm. After you confirm, the address, your code and the confirmation date are added to our subscriber list in our database and our internal records, and the address is added to our mailing list at our email provider, which is also what keeps the unsubscribe link working. When you sign up for the discount code, our private signup board in Slack shows a shortened version of your email address, the page and time you signed up, whether you added a mobile number, and where your signup stands (confirmed, welcome email sent, code used). The signup form, the code check in the project builder, sending a project brief and a discounted checkout each log the IP address of the attempt (and, for a signup, the email address) to limit abuse; entries older than 90 days are cleared the next time that log is written. The confirmation email and every marketing email include an unsubscribe link, and carry the standard header that lets your mail app show its own unsubscribe button; both stop the same mailing. When you unsubscribe we keep the record that you did, so we stop sending you marketing email. That record is permanent: signing up again with the same address will not restart anything, and the signup form will not tell you so, because it answers every address identically rather than revealing who is on the list. Email us and we will put you back on. If you redeem a code at checkout, we record the redemption against it.
Text messages
Our text message program is not live yet, and no marketing text is sent before it is. On the discount code signup the number field stays hidden until then. On the website and AI search audit you can already give a number and tick the separate Agnostify Updates box; see Audit texts below. When it is live, adding a mobile number is optional. Leaving the marketing consent box unticked and choosing Continue without texts completes email-only signup without sending or storing the entered number or requesting a text. If you tick the marketing box and choose Text me the code, our verification provider, Twilio, texts you one six-digit code to confirm the number is yours. That code is transactional and is sent separately from this Marketing program. Only after you have consented to marketing and successfully verified your number does it join the Agnostify text program and receive occasional Agnostify offers. Message frequency varies. Message and data rates may apply. Consent is never a condition of purchase. We do not sell mobile numbers. They are stored in our database and our internal contact sheet, and sent to our messaging provider only to deliver the texts you asked for. Mobile numbers and text message consent are not shared with third parties or affiliates for marketing purposes. Reply STOP to any message to opt out, HELP for help. You can ask us to delete your number at any time.
Website and AI search audit
When you request an audit at agnostify.com/audit, we collect your name, company name, website and email address. At the end you can also add a mobile number. That is optional, and we keep the number only if you also tick one of the text boxes under it; a number typed without a ticked box is not sent to us. We record your IP address, which we use to limit how many scans one network can start and to pick up a scan you already started that day, and how you arrived: the campaign labels in the link and the referring page, without its query string. We keep these with your request in our database (Neon). Your name, email address, company, website, mobile number if we kept one, how you arrived and whether you paid also go to our internal contact sheet (Google Sheets, part of Google Workspace). We use them to run your audit, email your Free Preview or your full report, and answer you if you write to us.
To run the checks we read your website’s public pages. The company name you typed, your website’s address, the text of those pages and the answers the AI assistants give are sent to Anthropic’s Claude API, which writes the questions, the suggested fixes and the report. The questions are sent to Bright Data, which asks ChatGPT, Gemini, Google AI Mode and Perplexity and returns their answers. The name, email address and mobile number you type into the form are not sent to Anthropic or Bright Data. Your website’s pages and the assistants’ answers can contain names or contact details that are already public, and that text is sent as it is.
Resend delivers our emails, so it receives your email address and the email’s content. If you pay, Stripe processes the payment and receives your email address and the audit’s reference number. If you book a call from the link in your Free Preview, Cal.com receives what you enter to book, and the booking carries the audit’s reference number. Our internal audit alerts in Slack, or Discord if Slack is unavailable, carry only the audit’s reference number. Vercel hosts the site and runs these steps.
We keep audit requests and their results for as long as we need them to deliver your reports, answer questions about them and keep our business records. You can ask us to delete yours at any time using the request process below. We then delete the request, its results and its row in our contact sheet, and keep only the record of any text consent or opt-out, so we can show what you agreed to and never text a number that opted out.
In the Crew demo, the lines we read from your site, or the description you type, go to our AI provider to write the demo setting. We don’t store them.
Audit texts
Adding a mobile number at the end of the audit is optional. You can get your Free Preview or buy your full report without it. Under the number are separate, unchecked boxes, one for each kind of text. Each box you tick records its own consent: the time, the exact wording you saw, the number, the page and the audit it belongs to.
Agnostify Updates: if you tick this box, you join our marketing text program described under Text messages above: recurring marketing texts with Agnostify offers and news, up to 4 a month plus 1 enrollment confirmation. Consent is not a condition of any purchase or of getting the Free Preview.
Report texts: when this box is offered and you tick it, Agnostify sends 1 confirmation text and then 1 text when each report you request is ready, at most 2 report-ready texts per audit, each with a link to that report. Your report still comes by email either way.
Message and data rates may apply. Reply STOP to any message to opt out, HELP for help. No text of either kind is sent until the mobile carriers approve that program. Once they do, your number and the messages go to Twilio, our messaging provider, only to deliver the texts you asked for. We keep each consent record for as long as we may text that number and for at least 5 years after, so we can show you asked for those texts. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.
Booking a call
Scheduling runs on Cal.com, which handles what you enter in the booking form under its own privacy terms. When a booking is made, Cal.com notifies us and we record your name, email address, the event and its time in our contact record so we can prepare for the call and follow up. If you prepared a brief first, it is passed to Cal.com as the booking notes, which you review before confirming. You can also skip the brief and book directly.
Your project brief and the optional AI intake
The project builder lets you send us a brief: your name, email address, company, website, timeline, the services you picked, what you want fixed, and a discount code if you have one. When you send it, the brief is summarized by Anthropic’s Claude API, a service provider that does not train on it under its commercial terms, and the brief and summary are delivered to Agnostify through a private Discord channel so we can prepare for your call. Before sending, you can also talk it through in the optional AI intake conversation. If you do, that conversation is processed by Anthropic’s Claude API the same way, and the full transcript, not a summary, travels with your brief when you send it. When the AI intake or the brief summary reserves an AI request, including the opening of an intake and a reserved request that then never runs, we log the time, which of the two reserved it and the IP address (for IPv6, only its network part), plus, for a continuing conversation, a one-way fingerprint of it, to limit how much one network can use the AI; entries older than 8 days are cleared at the next successful check of that log. Each attempt to send a brief also logs your IP address (for IPv6, only its network part) in the 90-day abuse log described in the discount code signup section above. We keep briefs and transcripts in that channel to prepare for and follow up on your call, and we delete them when you ask. Neither the brief nor the intake is required to book, and you can ask us to delete either at any time using the request process below.
Payments
Payments are processed by Stripe under its own privacy terms. Agnostify never receives or stores card details. Stripe tells us the email address used at checkout and gives us a customer reference, which we keep in our contact record with the purchase. If you use a discount code, the code and your subscriber reference are attached to the Stripe checkout.
Your contact record
Across those interactions we keep one contact record per email address: the name and company you gave us, if any, your code, the services you picked, the page you came from, the dates of your signup, bookings, intake and purchases, the reference ids from a booking or a payment, and, if you paid, a Stripe customer reference and what you bought. It exists so we can respond properly. It is never sold, and it is shared only with the service providers named below.
If you leave a review on our reviews page, we store your name, company, role, rating, review and email address in our database (Neon), with a one-way fingerprint of your IP address that limits how many reviews one connection can send, so we can check you worked with us and publish your review. Only Sully and Alec see your email address; it is never published. Resend emails Sully and Alec a copy of your review (your name, company, role, rating and text, without your email address), and those email copies stay in their inbox until they delete them. We delete your stored submission automatically within a week of it turning 12 months old, or sooner if you ask. A published review stays up until you ask us to take it down. Email sully@agnostify.com to ask for either.
Who receives information
These providers process information on our behalf, each under its own terms: Vercel (hosting and analytics), PostHog (analytics), Neon (database), Resend (email delivery), Twilio (SMS provider), Google Workspace (internal records), Cal.com (scheduling), Stripe (payments), Anthropic (AI intake and audit writing), Bright Data (AI assistant answers for audits), Slack (internal alerts and our signup board) and Discord (intake delivery and backup alerts). We do not sell or rent personal information, and we share it with no one else except as needed to meet a legal obligation.
Retention
We keep contact, booking and subscriber information for as long as needed to respond, manage a potential or active business relationship, meet legal obligations and resolve disputes, then delete or anonymize it. Briefs and intake transcripts are kept in our Discord channel to prepare for and follow up on your call, and are deleted when you ask. Abuse-log entries older than 90 days are cleared the next time that log is written. Unsubscribe records are kept so that they keep working. Audit requests and text consent records are kept as described in the audit sections above. PostHog keeps analytics events for the retention period of our PostHog plan, currently one year.
Your requests
You can ask what information we hold about you, ask us to correct it, or ask us to delete information we control by emailing sully@agnostify.com. We respond after verifying the request and explain if a legal obligation requires us to keep something. These requests cover our own records and the information our service providers process for us, and we pass a request on to them where needed. Cal.com and Stripe also keep their own records under their own terms; for those we will point you to the right place. Ordinary browsing events in PostHog are not tied to a name or a lasting identifier, so we usually cannot find one person’s browsing among them. Events from the audit carry a reference code that we can match to your audit in our own records, and we include those events when we handle your request.
California privacy rights
If you live in California, you have the right to know what personal information we collect, use and disclose, to ask us to delete or correct it, and not to be treated differently for using these rights. In the past 12 months we have collected these categories of personal information, from you, from your browser and from the service providers named above, for the purposes described in this policy: identifiers (name, email address, phone number, IP address), customer records (company name and purchase records), commercial information (what you bought), internet activity (pages viewed and actions on this site), approximate location (from Vercel Web Analytics) and professional information (your company and website). We disclose them only to the service providers listed under Who receives information, for those purposes, and where the law requires it. We do not sell or share personal information, as the California Consumer Privacy Act defines those terms, and have not done so in the past 12 months. We do not use sensitive personal information for any purpose that would give you a right to limit it. We do not share personal information with third parties for their own direct marketing. To make a request, use the process under Your requests; you can also use an authorized agent, and we may ask you to confirm the request directly with us. We respond within 45 days.
Visitors outside the United States
Agnostify operates from California, and our database is hosted in the United States. If you visit from elsewhere, what you provide is transferred here and handled under this policy, and the requests above are available to you in the same way.
If European or UK data protection law applies to you, we rely on these legal bases: taking steps you ask for and performing a contract (audits, bookings, payments and briefs), your consent (marketing emails and texts, which you can withdraw at any time), our legitimate interests in running, securing and measuring the site (server logs and the analytics described above; you can turn PostHog off with the button above, and object to any of it by emailing us), and legal obligations. You can also object to processing, ask for a copy of your information in a portable form, and complain to your local data protection authority.
Children
This site is for businesses and is not directed at children under 16. We do not knowingly collect information from them, and we delete any we learn of.
Changes
When this policy changes, the new version is posted here with a new effective date at the top, so the date tells you whether anything changed since your last visit.
Contact
For a privacy question or request, email sully@agnostify.com.