Privacy Policy

Last updated: 10 July 2026

This policy explains what personal data agai.works collects, why we collect it, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.

What data we collect and why

We collect personal data in the following ways:

Website Critique request form — when you request a free website critique, we collect your first name, last name, business email address, job title, business name, and website URL. We use this to run your critique, deliver your report by email, and send you occasional updates about agai.works tools and services. The legal basis is legitimate interests and, where you have explicitly opted in, consent.

Suite Waitlist form — when you join the waitlist for the agai.works suite, we collect your name, email address, and business name. We use this to notify you when new tools launch. The legal basis is consent.

Account creation and login — creating an agai.works account (needed to subscribe, track credits, and access your report history) requires an email address and password, authenticated via our provider, Supabase. We use this to verify who you are, manage your subscription and credit balance, and let you access reports you've previously run. The legal basis is performance of a contract with you.

Per-page analysis — Pro subscribers can request a focused critique of a specific page on their website. We collect the page URL you submit and store the resulting report against your account, along with how many credits it used. The legal basis is performance of a contract with you.

Subscription and payment — if you subscribe to Pro or purchase a credit top-up, payment is handled entirely by our payment provider, Lemon Squeezy, who acts as the Merchant of Record for these transactions. We do not see or store your card details — Lemon Squeezy collects and processes these directly. We receive confirmation of your subscription status and transaction history from Lemon Squeezy in order to manage your account and credit balance. The legal basis is performance of a contract with you and, for financial record-keeping, compliance with our legal obligations.

Analytics

We use Google Analytics 4 (GA4) to understand how visitors use agai.works. GA4 collects anonymised data about pages visited, time on site, and how you arrived at the site. No personally identifiable information is sent to Google Analytics. You can opt out of GA4 tracking using a browser extension such as the Google Analytics Opt-out Browser Add-on.

Who we share your data with

We use the following third-party services to process your data:

• Brevo (Sendinblue SAS) — we use Brevo to store contact information and send emails. Brevo is based in France and is GDPR compliant. Their privacy policy is available at brevo.com/legal/privacypolicy.
• Supabase, Inc. — we use Supabase to store account details, authentication credentials, critique reports, and credit balances. Their privacy policy is available at supabase.com/privacy.
• Anthropic — we use Anthropic's Claude AI models to generate your website critique reports. The content of the web pages you submit for analysis is processed by Anthropic in order to produce your report. Their privacy policy is available at privacy.claude.com.
• Lemon Squeezy — we use Lemon Squeezy (operated by Sold Through Link, LLC) to process subscription payments and credit top-up purchases, acting as the Merchant of Record. Lemon Squeezy collects and stores your payment details directly — we never see or store your card information. Their privacy policy is available at lemonsqueezy.com/privacy.
• Google Analytics — anonymised analytics data is processed by Google LLC. Their privacy policy is available at policies.google.com/privacy.
• Vercel Inc. — this website is hosted on Vercel's infrastructure. Vercel processes server request logs as part of normal hosting operations. Their privacy policy is available at vercel.com/legal/privacy-policy.

We do not sell your personal data to any third party, and we do not share it with any party not listed above.

How long we keep your data

We keep your contact information in Brevo for as long as you remain subscribed to our emails. If you unsubscribe or ask us to delete your data, we will remove your record within 30 days. Anonymised analytics data is retained by Google Analytics for 14 months. If you have an agai.works account, we retain your account details, credit balance, and report history for as long as your account remains active. If you delete your account or ask us to remove your data, we will do so within 30 days, except where we are required to retain transaction records for financial or legal compliance purposes.

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Ask us to correct inaccurate data
• Ask us to delete your data ("right to be forgotten")
• Object to or restrict how we process your data
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, contact us at rich@agai.works. We will respond within 30 days.

Cookies

agai.works uses a single analytics cookie set by Google Analytics (GA4). This cookie is used solely to distinguish unique visitors and sessions for analytics purposes. No advertising or tracking cookies are used. By continuing to use this site you consent to this cookie being set. You can delete or block cookies at any time through your browser settings.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will always reflect the most recent version. Material changes will be communicated by email to subscribers.

Contact

For any questions about this privacy policy or how we handle your data, contact Richard Hillier at rich@agai.works.