Privacy Policy
Effective: 2026-05-15 · GDPR (EU 2016/679) compliant
Who we are
yeison riascos (AgentMesh) is the data controller of personal data processed via agentmesh.eu and related services.
- · Registered address: Italy
- · VAT / Tax ID: rscysn90r22z604j
- · Contact: hello@agentmesh.eu
- · Privacy requests: privacy@agentmesh.eu
What data we collect
We only process the minimum data needed to operate the service:
| Waitlist signup | email address | consent (Art. 6(1)(a)) |
| Agent submission | name, email, agent name, website, description | performance of contract / pre-contract (Art. 6(1)(b)) |
| Featured listing checkout | billing data handled by Lemon Squeezy as merchant of record (we receive only order metadata) | performance of contract (Art. 6(1)(b)) |
| Report pre-order | email + Lemon Squeezy order metadata | performance of contract (Art. 6(1)(b)) |
| Server logs | IP address, user-agent, timestamp | legitimate interest (Art. 6(1)(f)) — security |
We do not use third-party advertising trackers, behavioural analytics, or fingerprinting. We do not buy or sell personal data.
Cookies & local storage
AgentMesh uses strictly necessary storage only:
- ·
am_cookie_ack— remembers that you closed the cookie banner. - · Lemon Squeezy may set its own cookies on the checkout domain when you click “Pay”. See Lemon Squeezy’s policy.
No analytics, no Google Tag Manager, no Meta Pixel, no Hotjar. If we add analytics in the future, it will be a privacy-respecting tool (e.g. Plausible / Umami, no personal data collected) and this page will be updated before activation.
Why we process it (legal bases)
- · Consent — waitlist subscription. Withdraw anytime by replying “unsubscribe”.
- · Contract — paid services (featured listings, report pre-orders). Required to deliver what you bought.
- · Legal obligation — invoicing, accounting, tax records (typically 10 years under EU/IT law).
- · Legitimate interest — security logs, fraud prevention, basic service operation.
Who we share data with (processors)
We use the following sub-processors. All are bound by data-processing agreements:
| Processor | Purpose | Location |
|---|---|---|
| Lemon Squeezy LLC (merchant of record) | Payment processing, EU VAT collection, invoicing — independent controller for billing data | United States (DPF) |
| Resend (Resend.com Inc.) | Transactional email delivery | United States (DPF) |
| Vercel Inc. | Hosting & edge runtime | EU regions (fra1) + US (DPF) |
| Vercel KV / Upstash | Email & submission storage (when enabled) | EU regions |
Transfers to processors located outside the EEA rely on the EU-U.S. Data Privacy Framework (DPF) and Standard Contractual Clauses (SCCs) where applicable.
Retention
- · Waitlist email: until you unsubscribe.
- · Submission data: 24 months after last update, then archived or deleted.
- · Invoicing & accounting records: 10 years (legal obligation).
- · Server logs: maximum 30 days.
Your rights (GDPR Art. 15–22)
You have the right to:
- · access your data
- · rectify inaccurate data
- · erase your data (“right to be forgotten”)
- · restrict processing
- · data portability
- · object to processing
- · withdraw consent at any time
- · lodge a complaint with your supervisory authority (in Italy: Garante per la protezione dei dati personali)
Email privacy@agentmesh.eu from the address tied to your account. We respond within 30 days.
Security
We host on Vercel’s SOC 2 / ISO 27001 infrastructure, force HTTPS, verify webhook signatures (HMAC-SHA256), sanitise all email content, and rate-limit all public forms. We never store card data — Lemon Squeezy handles all payment information directly as merchant of record.
Children
AgentMesh is a B2B service not directed at children. We do not knowingly process data of users under 16.
Changes
We may update this policy. Material changes will be notified via email to active users at least 14 days before they take effect.
Last updated: 2026-05-15