What we collect, and what we don’t.

This policy covers agentguard.lictorate.com — this website and its waitlist. It does not cover the AgentGuard software: AgentGuard runs in your own infrastructure, and nothing it processes reaches us.

Lictorate, based in São Paulo, Brazil, is responsible for the personal data described here. Questions about it go to cauaferrazp@gmail.com.

That's the complete list. The form asks for nothing but an email address.

• Your IP address, in our own systems. Our code uses it for a moment to stop the signup form being flooded — hashed with a random key held only in memory — and never stores or logs it. Vercel, which hosts the site, processes it to deliver the page.
• Your email in our logs. Server logs record that a signup succeeded or failed, never whose.
• Your email at Google, or at any advertising network. It is never sent — not in plain text, not hashed.
• A profile of you. We don’t do ad targeting or retargeting, and we don’t combine this data with anything else.

• Your waitlist email — your consent, given when you submit the form. You can withdraw it at any time.
• Google cookies — your consent, given in the cookie banner. Nothing from Google loads until you choose.
• Hosting, rate limiting and aggregate analytics — our legitimate interest in running a website that works and can’t be abused. It is kept to the minimum and never used to profile you.

We use a few providers to run the site. Each acts on our instructions and receives only what's listed here.

These providers are based in the United States, so your data may be processed outside your country. The regional sections below set out the safeguards that apply.

This site sets no cookies of its own. It keeps the small values below in your browser’s local storage, and — only if you accept — Google sets its own cookies.

You can change your mind at any time in Cookie settings. Withdrawing consent deletes the Google cookies and reloads the page without them.

We keep your email until you ask us to delete it, or until the waitlist program ends — whichever comes first. The lifetimes of browser storage and cookies are listed above.

• Only our server can add to the waitlist, using a credential that never reaches your browser. No part of this website can read the list back.
• Row-level security on the database refuses every public request; only our server's credential can write to it.
• Every connection is encrypted with HTTPS, and browsers are instructed never to fall back to an unencrypted one.

Wherever you are, you can ask us to:

• tell you whether we hold data about you, and give you a copy
• correct it
• delete it
• stop using it — including withdrawing any consent you gave

Email cauaferrazp@gmail.com from the address in question. We answer within 15 days — the shortest deadline among the laws that apply to us. You can also complain to a data-protection authority; the regional sections below say which.

When this policy changes, the date at the top changes with it. If a change affects cookies you accepted, the banner asks you again.

The GDPR — or the UK GDPR — governs how we handle your data.

• Legal bases: consent (Art. 6(1)(a)) for the waitlist and for Google cookies; legitimate interests (Art. 6(1)(f)) for hosting, rate limiting and aggregate analytics.
• Your rights under Articles 15 to 22: access, rectification, erasure, restriction, data portability and objection — and withdrawing consent at any time, as easily as you gave it (Art. 7(3)).
• Transfers to our US providers rely on the EU–US Data Privacy Framework (and its UK extension) where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses.
• Cookies that aren't strictly necessary are set only with your prior consent, as the ePrivacy rules require.
• You can lodge a complaint with the supervisory authority where you live or work — in the UK, the ICO.

The LGPD (Lei nº 13.709/2018) governs how we handle your data.

• Legal bases: consent (Art. 7, I) for the waitlist and for Google cookies; legitimate interest (Art. 7, IX) for hosting, rate limiting and aggregate analytics.
• Your rights under Art. 18: confirmation that we process your data, and access to it; correction; anonymization, blocking or deletion; portability; information about who we share it with, and about what happens if you refuse consent; and revoking consent.
• We answer requests within 15 days (Art. 19).
• International transfers to our US providers follow Art. 33, including through standard contractual clauses.
• Our data-protection officer (encarregado) is Cauã Ferraz, at cauaferrazp@gmail.com.
• You can also petition the ANPD (Autoridade Nacional de Proteção de Dados).

We don't sell your personal information, and we don't share it for cross-context behavioral advertising. It is never used to target ads at you.