Privacy policy

Updated September 27, 2026

What Agents Want is operated by Mauro Martino. For privacy questions or requests about your data, contact mamartino.com@gmail.com.

Information we collect

• Account information: your name, email address, profile image if provided, account identifier, and optional profile details you choose to provide.
• Authentication information: session records, linked Google account identifiers and authentication tokens. If you use email and password, a password hash is stored.
• Service information: report settings, generated queries and responses, brand rankings, credit usage, and files or support messages you submit.
• Technical information: IP address, browser information, request and error logs, and timestamps used to operate and protect the service.

Google sign-in

When you choose Continue with Google, Google provides your basic profile information and email address so we can create or authenticate your account. We request only the openid, email and profile permissions. We do not request access to Gmail, Google Drive, contacts or calendars.

Google account information is used for sign-in, account identification and your profile. The report pipeline does not send your Google account profile or authentication tokens to AI models, use them for advertising, or use them to train AI models.

You can remove the Google connection in your Google Account settings. Removing that connection does not automatically delete data already stored by What Agents Want; contact us to request account deletion.

Why we use information

We use account and report information to provide the service you request, manage your sessions and credits, save your results, and respond to support requests. We use technical records to diagnose failures, prevent abuse and protect accounts.

Where data protection law requires a legal basis, account and report processing is necessary to provide the requested service; operational security and troubleshooting support our legitimate interests in running a reliable service. We may also process information to meet applicable legal obligations. Where processing depends on consent, you may withdraw that consent.

Service providers and data sharing

Amazon Web Services hosts the application, database and file storage. The primary application and database are deployed in Frankfurt, Germany; public static files are delivered through a global content delivery network. Google processes sign-in through its own authentication service.

When you run a report, the relevant prompts and responses are processed by the selected AI providers and by the models used to analyse the answers. The current integration uses OpenAI, Anthropic and Google. Some reports also use a provider's web search service. Avoid placing confidential information or sensitive personal data in report inputs.

These providers may process data in countries other than your own, including the United States, under their applicable service terms and privacy arrangements. Contact us for information about the arrangements relevant to your data. We may disclose information when required by law or as necessary to investigate abuse and protect the service.

Report access is restricted to the authenticated account that owns the report. The public sample report uses bundled demonstration data.

Cookies and browser storage

The site uses cookies and browser storage for sign-in, authentication security, language and display preferences. The current application does not include advertising trackers or third-party marketing analytics. Blocking essential cookies can prevent sign-in from working.

Retention and your choices

Account and report records currently have no automatic expiry: they remain available in your account until removal is requested and processed. Session lifetimes are limited and can be renewed while you use the service. Operational logs and backups have separate retention schedules and may retain copies after a change to active records.

You can contact mamartino.com@gmail.com to request access, correction, a copy of your information, or deletion of your account and associated data. We may ask you to verify ownership before acting. Some information may need to be retained to meet legal requirements, resolve disputes or address security incidents.

Depending on the law that applies to you, you may also have rights to restrict or object to processing, portability, withdrawal of consent, and to complain to your local data protection authority. Report rankings analyse brand mentions; they are not used to make decisions about individuals with legal or similarly significant effects.

Changes

We will update this page when our data practices change and revise the date above. Material changes that require notice will be communicated through the service or the contact details associated with your account.