Effective June 17, 2026 · Version 1.0 · Source PRIVACY_POLICY.md

Agent Master Key — Privacy Policy

Effective Date: June 17, 2026 Last Revised: October 21, 2026 Version: 1.0 Operating Entity: AM Accelerated LLC, an Ohio limited liability company Contact: support@agentmasterkey.com Product: Agent Master Key ("AMK"), distributed at agentmasterkey.com

1. Who We Are and What This Policy Covers

AM Accelerated LLC ("we," "us," "our") develops and distributes Agent Master Key, a local-first macOS application that lets users store provider API keys in a locally encrypted vault on their Mac and issue scoped, revocable agent keys (amk_live_...) to AI agents. The broker that enforces access policy runs entirely on the user's Mac at http://127.0.0.1:47381. Provider secrets never leave the user's machine to reach AMK servers.

This Privacy Policy describes what personal information we collect, how we use it, and what we do not collect. It applies to:

• The Agent Master Key macOS application
• The local broker service (com.agentmasterkey.local LaunchAgent)
• The agentmasterkey.com website and any subdomain pages, including portal.agentmasterkey.com
• Purchases, subscriptions, and the optional portal account
• Support and billing interactions

It does not govern the third-party provider services (GitHub, Google, OpenAI, etc.) whose credentials you store inside AMK. Those services have their own privacy policies.

2. The Architecture in Plain Language

Understanding how AMK works is essential to understanding what data we can and cannot see.

What runs on your Mac:

• The Agent Master Key.app SwiftUI application
• A bundled Node.js broker process that starts as a macOS LaunchAgent at login
• An encrypted local vault (~/.agent-master-key/state/vault.json, AES-256-GCM) that stores your provider secrets; the vault root key is managed entirely on your device
• A local audit log (~/.agent-master-key/state/audit.json) stored on disk, hash-chained to detect tampering

What AMK servers do not have access to:

• Your provider API keys, tokens, or bot tokens (stored only in your encrypted local vault)
• The content of tool calls made through the broker (e.g., what GitHub issue was read, what Telegram message was sent)
• Your local audit log entries
• The amk_live_... agent keys you create (the broker's key store records only a SHA-256 hash of each key value; raw keys are shown once at creation and not stored)
• Your full payment-card number (see Section 3.1 — card details go to Stripe, never to us)

Security posture: All provider secrets remain on your device in the encrypted vault. The broker's local audit log records every agent action in a tamper-evident chain. See our Trust page at agentmasterkey.com/trust for details on the current security architecture.

The broker routes agent requests through policy enforcement and calls provider APIs directly from your Mac. AMK's infrastructure does not sit in that data path.

3. Information We Do Collect

3.1 Purchases, Subscriptions, and Account Data

When you buy a plan, checkout is completed on our site through Stripe (Stripe, Inc.), our payment processor. Stripe collects the payment method and billing details and gives us what the license service needs:

• Your email address — used to send your license key and receipts, to find your subscription if you lose the key, and for refund and dispute handling
• Your license record — the license key issued to you, its status (active, disabled, refunded, or chargeback), and its activation state
• Your subscription record — plan interval (monthly or yearly), renewal state, and the Stripe customer and subscription identifiers that link your records
• Your country or tax location — used for accounting and the tax handling the law requires (tax is calculated at checkout by Stripe Tax)
• A device-instance identifier when the license is bound to your Mac — a hashed machine identifier generated on your Mac; one license covers one Mac at a time (see Section 3.3)

We do not receive or store your full payment-card number or bank account details. Stripe handles those under its own privacy policy. The customer portal where you update a card, view invoices, or cancel is hosted by Stripe.

Prior entitlement recovery: Legacy entitlement services remain available to preserve prior-customer rights, including Founder licenses applied automatically to qualifying pre-launch installs. The same records listed above apply to prior transactions.

3.2 Downloads

The download page does not ask for or collect an email address, account, marketing consent, or verification challenge. The page reads the public release manifest and enables a direct download only when that manifest identifies a verified artifact and SHA-256 hash.

The release receipt used to promote and verify published software records build and artifact integrity information, not user information. It does not identify who downloaded the software.

3.3 Free Trial and License Records

The free trial needs no email, account, or card. To anchor the trial, the app sends a hashed device-instance identifier (a machine identifier generated on your Mac and sent already hashed) to the license service at api.agentmasterkey.com, which stores a write-once trial record containing that identifier, the trial start time, and the trial expiry. The same kind of identifier binds an activated license to one Mac.

After a purchase, the license key is shown on the success page and, when an email is available, sent to your purchase email through Resend, our transactional email provider. A Resend failure never blocks the key — the success page always shows it.

When you open your billing page at agentmasterkey.com/account, the license key you type is sent to the license service only to open the Stripe customer-portal session; it is not stored in your browser.

3.4 Portal Accounts (Optional)

portal.agentmasterkey.com is an optional account hub for onboarding, support, and links into billing, hosted for us by Bubble (Bubble Group, Inc.). If you choose to create a portal account, Bubble processes your account email and sign-in records under its own privacy policy.

No portal account is required to download the app, start the trial, or buy a plan, and the portal never stores license keys, agent keys, or provider secrets. To delete portal account data, use the deletion route in Section 7.

3.5 Support Communications

If you voluntarily contact us at support@agentmasterkey.com, post in the public community, or use another support channel, we receive the content you choose to share. Public community posts are visible to others. We use feedback to respond to requests and improve the product.

We ask you not to include raw API keys, OAuth tokens, or other provider secrets in support messages. The app includes a "Copy Redacted Diagnostics" function that strips secret values before copying diagnostic output — please use that.

We retain support emails for 90 days after the issue is resolved unless applicable law requires a longer period. See Section 7 for deletion requests.

3.6 Website Analytics

The agentmasterkey.com website uses Simple Analytics, a privacy-friendly analytics service (see Section 6.2). It is cookieless and does not collect or store personal data, cross-site identifiers, or advertising profiles. It records only aggregate, non-identifying page metrics — such as page URL, referrer, country, browser type, and anonymous events like a download-button click — so we can understand overall site traffic. These events contain no personal data or identifiers. We do not use advertising cookies or ad-network trackers.

3.7 Crash Reporting and Application Telemetry

Current status: The application includes a consent-per-event crash reporter. Nothing is ever sent automatically. If Agent Master Key quits unexpectedly, then on the next launch it may ask whether to send an anonymous crash report — and a report is transmitted only if you choose "Send report" for that specific crash. You can turn these prompts off at any time in Settings → Updates ("Offer to send crash reports"), or choose "Never ask again" when prompted.

When you choose to send a report, the app scrubs it on your device and posts it once to the AMK License Service (api.agentmasterkey.com), which forwards it to our error-monitoring provider, Sentry (see Section 6.2). The License Service restricts each report to an allow-list of fields and scrubs it again before it reaches Sentry. A crash report contains only anonymous technical crash diagnostics, such as:

• The crash type, exception signal, and code location (a scrubbed stack trace)
• Your macOS version, and the Agent Master Key app version and build number
• Fixed technical identifiers (the app bundle and process name) and a random per-crash incident id

A crash report never includes your files, provider secrets or API keys, Master Keys, agent call content, audit log entries, your license key, or your email address. The application does not otherwise collect background usage telemetry.

3.8 Aggregate and De-Identified Data

We may use the aggregate, non-personally-identifying website metrics described in Section 3.6 for product planning. The application does not send usage or active-install analytics in the background.

4. Information We Explicitly Do Not Collect

The following data is never transmitted to AMK's servers under the current architecture:

Known limitations: (1) The local broker enforces policy on loopback and requires a valid Agent Master Key by default, but does not perform cryptographic OS-process identity gating — any local process holding a valid key can submit requests. The security of your local Mac user account is part of your security posture. See agentmasterkey.com/trust for the current threat model.

5. How We Use the Information We Collect

We use the information described in Section 3 for these purposes only:

1. Trial and license fulfillment: Anchor the free trial, bind licenses to one Mac, deliver license keys, and verify entitlement
2. Subscription service: Process payments, issue receipts, manage renewals, cancellations, refunds, and disputes through Stripe
3. Prior-access support: Recover and manage entitlement records for people who obtained access before the Public Preview
4. Download distribution: Publish a manifest-backed download and its integrity hash without collecting downloader identity
5. Support: Respond to your support requests and diagnose reported issues
6. Legal compliance: Retain records required by applicable law
7. Product improvement: Aggregate, cookieless website traffic and voluntary community or support feedback
8. Diagnostics: Fix crashes and defects using the consent-based crash reports described in Section 3.7
9. Portal accounts: Operate the optional portal account hub through Bubble (Section 3.4)

We do not sell your personal information. We do not use your personal information for advertising or behavioral profiling.

6. Data Sharing and Third Parties

We share personal information only in these circumstances:

6.1 Payment Processor

Stripe processes checkout, subscription billing, the customer portal, tax calculation, refunds, and disputes under its own privacy policy. AM Accelerated LLC remains responsible for the license and entitlement records it stores.

6.2 Service Providers

We use a small number of service providers that process limited data on our behalf for the functions described here, subject to their own terms and privacy policies:

• Cloudflare (Cloudflare, Inc.) — website, download, and license-service delivery infrastructure. The download does not use a download-receipt form or Turnstile challenge. Cloudflare may process limited request and network information needed to deliver and protect its services under its privacy policy.
• Stripe (Stripe, Inc.) — payment processing, checkout, customer portal, and tax calculation (see Section 6.1).
• Bubble (Bubble Group, Inc.) — hosting for the optional portal account at portal.agentmasterkey.com (see Section 3.4).
• Sentry (Functional Software, Inc.) — error monitoring. Receives an allow-listed, scrubbed crash report only when you explicitly choose to send one (see Section 3.7). Reports never contain secrets, keys, license keys, email addresses, or app content.
• Simple Analytics — cookieless, privacy-friendly website analytics for agentmasterkey.com (see Section 3.6). It collects only aggregate, non-identifying page metrics and does not store personal data.
• Resend — transactional email delivery for license-key delivery, prior-access recovery, and support messages (see Section 3.3).

We configure these services to receive only the data needed for the described function. We do not use them to build advertising profiles.

6.3 Legal Requirements

We may disclose information if required by law, subpoena, court order, or to protect the rights, property, or safety of AM Accelerated LLC, our users, or the public.

6.4 Business Transfer

If AM Accelerated LLC is acquired, merged, or undergoes a similar corporate event, your information may be transferred as part of that transaction. We will notify you via the email address on file before your information becomes subject to a materially different privacy policy.

6.5 No Other Sharing

We do not share your personal information with data brokers, advertising networks, or any third party not described in this section.

7. Data Retention and Deletion

To request deletion of personal information we hold — including portal account data — email support@agentmasterkey.com with the subject line "Data Deletion Request" and identify the email address used for a purchase, portal account, or support request. Do not send passwords, API keys, agent keys, payment details, or other secrets. We may ask you to verify control of the email address before acting so that another person cannot delete your records. We will respond within the period required by applicable law; unless a different period applies, our target is 30 days. Verified CCPA/CPRA requests follow the 45-day period described in Section 9.2.

8. Security

Local data (on your Mac): Provider credentials are stored in an AES-256-GCM encrypted vault file (~/.agent-master-key/state/vault.json). The vault root key is managed entirely on your device. The audit log is hash-chained to detect tampering.

Download and trial: The download page does not collect an email address or create a user download receipt. The published release receipt contains software build and artifact-integrity information only. The trial stores only a hashed device-instance identifier and its timestamps on the license service.

Data in transit: Website and download requests, license validation, trial records, and purchase or support calls use HTTPS. Provider API calls made by the broker (GitHub, Google, etc.) are made over HTTPS to provider endpoints directly from your Mac.

Limitations: Known security limitations exist (no cryptographic OS-process caller-identity gating on the local broker; a valid Agent Master Key is required by default). Distribution is via direct download from agentmasterkey.com; pre-release, early-access, internal, or test builds may be distributed before Developer ID signing, Apple notarization, or Gatekeeper readiness is complete. The Mac App Store is not the distribution channel. See agentmasterkey.com/trust for the current threat model.

We implement reasonable administrative, technical, and physical security measures, but no system is perfectly secure. If you believe you have discovered a security vulnerability, please report it to security@agentmasterkey.com rather than publicly disclosing it.

9. Your Rights

9.1 All Users

You may:

• Request a copy of personal information we hold about you
• Request correction of inaccurate personal information
• Request deletion of your personal information (subject to legal retention obligations)
• Withdraw consent where processing is based on consent

To exercise these rights, contact support@agentmasterkey.com.

9.2 California Residents (CCPA / CPRA)

California residents have the right to:

• Know what personal information we collect and how it is used
• Request deletion of personal information
• Opt out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising your rights

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

To submit a verifiable consumer request, email support@agentmasterkey.com with "CCPA Request" in the subject line. We will respond within 45 days.

9.3 EEA, UK, and Switzerland Residents (GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, the following applies:

Legal basis for processing:

• Trial and license fulfillment, subscription service, and support: contract performance (Article 6(1)(b))
• Legal compliance: legal obligation (Article 6(1)(c))
• Website analytics: legitimate interests (aggregate, cookieless, non-identifying — see Section 3.6)
• Crash reporting: your consent (Article 6(1)(a)), given per crash report (see Section 3.7)
• Portal account: contract performance for the optional account (Article 6(1)(b))

Data controller: AM Accelerated LLC, contact: support@agentmasterkey.com

International transfers: If personal information is transferred outside the EEA/UK, we rely on Standard Contractual Clauses to ensure adequate protection.

Right to lodge a complaint: You may lodge a complaint with your local supervisory authority. In the EU, find your authority at: https://edpb.europa.eu/about-edpb/about-edpb/members_en

10. Children's Privacy

Agent Master Key is not directed to children under 13 (or under 16 where applicable). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, contact support@agentmasterkey.com and we will delete it promptly.

11. Changes to This Policy

We will post changes to this policy at https://agentmasterkey.com/privacy and update the "Last Revised" date at the top. For material changes, we may provide additional notice where required by law, such as a notice on the website or an administrative message to affected users. Continued use of AMK after the effective date constitutes acceptance of the updated policy.

12. Contact

Privacy inquiries: AM Accelerated LLC Email: support@agentmasterkey.com

Security vulnerabilities: security@agentmasterkey.com

Appendix: What Data Stays Local (Summary for Technical Users)

The following files are entirely on your Mac. We have no access to them, no backup of them, and no ability to recover them if you lose them.

To remove all local AMK data, first uninstall the app and then run the full reset:

# Remove the app binary only:
./script/uninstall_macos.sh --verify

# Remove all local state, logs, LaunchAgent, and app-support data
# (preview first with --dry-run):
./script/reset_macos.sh --dry-run
./script/reset_macos.sh --yes --all --verify

Uninstalling the app does not affect the third-party provider accounts you connected; you must revoke those tokens separately in each provider's dashboard.

Questions? support@agentmasterkey.com · © 2026 AM Accelerated LLC.