Privacy Policy

Last updated: April 17, 2026

1. Introduction

Eigenart Filmproduktion ("we", "us", "our") operates the AgentShield API and website at agentshield.pro. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the EU General Data Protection Regulation (GDPR) and German data protection law (BDSG).

2. Data Controller

Eigenart Filmproduktion
Contact: [email protected]
Website: agentshield.pro

3. Data We Collect

Account Data: When you register, we collect your email address, chosen plan, and API key prefix. This is necessary for contract performance (Art. 6(1)(b) GDPR).

Usage Data: We collect aggregated API usage metrics (request counts, response times, error rates) for service operation and improvement. This is based on our legitimate interest (Art. 6(1)(f) GDPR).

API Input Data: Text submitted to the API for classification is processed in real-time and is not stored after the response is returned. We do not log, retain, or use your input content for training or any other purpose.

Payment Data: Payment processing is handled by Paddle (Paddle.com Market Limited). We do not store credit card numbers or bank details. Paddle acts as the Merchant of Record. See Paddle's Privacy Policy.

Server Logs: Our servers automatically collect IP addresses, request timestamps, and HTTP headers for security and abuse prevention. These logs are retained for 30 days and then deleted.

4. How We Use Your Data

• To provide and maintain the Service
• To manage your account and subscription
• To send transactional emails (account confirmations, billing notifications)
• To detect and prevent abuse or unauthorized access
• To generate aggregated, anonymized usage statistics

We do not sell your personal data. We do not use your data for advertising or marketing purposes without your explicit consent.

5. Data Sharing

We share data only with:

• Paddle (payment processing) — as Merchant of Record
• Cloudflare (CDN and DNS) — for content delivery and DDoS protection
• Law enforcement — only when required by applicable law

6. Data Transfers

Our servers are located in the European Union. If data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place, such as EU Standard Contractual Clauses.

7. Data Retention

• Account data: retained for the duration of your account, plus 30 days after deletion
• Usage metrics: retained in aggregated form indefinitely
• Server logs: retained for 30 days
• API input data: not retained (processed in real-time only)

8. Your Rights (GDPR)

You have the right to:

• Access your personal data (Art. 15 GDPR)
• Rectify inaccurate data (Art. 16 GDPR)
• Erase your data ("right to be forgotten") (Art. 17 GDPR)
• Restrict processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing based on legitimate interest (Art. 21 GDPR)
• Lodge a complaint with a supervisory authority

To exercise these rights, contact [email protected].

9. Cookies

The AgentShield website uses only essential cookies required for functionality. We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

10. Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), access controls, and regular security reviews.

11. Children

The Service is not intended for individuals under 16 years of age. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The current version is always available at agentshield.pro/privacy.

13. Contact

For privacy-related inquiries, contact:
[email protected]