1. Who we are
Continual Labs Limited ("Continual Labs", "we", "us") is the controller of personal information used to operate Agent Logger, including its website, account and licence service, payment flow, browser extension, and support. We are a company registered in England and Wales under company number 17387340.
This policy distinguishes information processed by our hosted service from browser context that stays on your device unless you deliberately send it to an AI assistant.
2. Information we handle
| Category | Examples | Why we use it |
|---|---|---|
| Account | Email address, name, user ID, authentication and session data, and optional lifecycle-email preferences and consent times | Create and secure your account, sign you in, and provide support |
| Licence and device | Plan, licence status, pseudonymous installation fingerprint, device label, browser, activation and last-seen times | Issue entitlements, enforce device limits, prevent abuse, and support offline access |
| Payment | Stripe customer and transaction identifiers, amount, currency, status, consent time, cancellation, refund, and dispute state | Set up the agreed charge, collect payment, issue access, reconcile records, and meet legal obligations |
| Service and security | Request time, IP address, user agent, error code, limited infrastructure logs, and HMAC-keyed support/login rate-limit subjects | Deliver, protect, diagnose, and improve the service |
| Support | Name, email, ticket reference, subject, message, status, and other information you choose to provide | Acknowledge requests, answer questions, resolve problems, and prevent support-form abuse |
Stripe receives and stores your card details. Continual Labs does not receive or store your full card number or card security code.
3. Browser context and local processing
Screenshots, selected elements, page content, console errors, and network diagnostics are processed locally by the extension and the Agent Logger MCP runtime. They are not uploaded to Continual Labs as part of normal product use.
- The extension stores preferences, account tokens, an installation identifier, and pairing state in Chrome extension storage.
- The local runtime may temporarily store screenshots, artifacts, and session state on your computer. You can delete these through the product controls, by clearing extension data, or by removing the local Agent Logger data directory.
- When you choose Send, the selected context is delivered through the local runtime to the AI assistant you configured. That assistant or its provider processes the content under its own terms and privacy policy.
- Monitoring is intended to apply only to a tab you explicitly select. Avoid capturing pages containing information you are not authorised to process.
Local processing does not make browser content anonymous. Screenshots, page text, URLs, and errors can contain personal, confidential, or credential information. Review the content before sending it and use the least access necessary.
4. Purposes and lawful bases
| Purpose | UK GDPR lawful basis |
|---|---|
| Provide accounts, licences, trial, checkout, cancellation, and support | Performance of our contract or steps requested before entering it |
| Keep accounting, transaction, tax, and corporate records | Compliance with legal obligations |
| Protect accounts, prevent fraud and abuse, diagnose failures, and maintain reliability | Our legitimate interests in operating a secure and dependable service |
| Send service messages about authentication, payment, security, or material product changes | Performance of contract, legal obligation, or legitimate interests, depending on the message |
| Send optional onboarding guidance and opted-in inactivity reminders | Consent, which you can withdraw using the link in each message or your account preferences |
We do not sell personal information, use it for behavioural advertising, or run advertising trackers in the extension. We do not currently use optional website analytics.
5. Service providers and recipients
- Supabase provides hosted authentication and database services.
- Stripe provides card collection, payment processing, fraud controls, refunds, and payment records.
- Vercel provides website, API, network, and deployment infrastructure.
- Hostinger provides the Agent Logger support mailbox and SMTP delivery for payment, support, and optional lifecycle email.
- The AI assistant or AI provider you configure receives only the browser context you choose to send; it is not a Continual Labs sub-processor for that separate account unless we expressly agree otherwise.
- Professional advisers, regulators, courts, or law enforcement may receive information where reasonably necessary or legally required.
Providers may process limited technical logs under their own security and retention practices. We require providers acting for us to process personal information only for the contracted service and with appropriate safeguards.
6. Retention
| Information | Typical retention |
|---|---|
| Account, profile, licence, and active device records | While the account is active, then deleted or anonymised when no longer needed, subject to legal and security requirements |
| Authentication sessions | Until expiry, sign-out, revocation, password reset, or account deletion |
| Payment and accounting records | Normally six years from the end of the financial year they concern, or longer where law, a dispute, or an official inquiry requires it |
| Security and infrastructure logs | For the shortest practical operational period under the relevant provider settings, extended only for investigation or legal need |
| Support correspondence | Normally 18 months from submission, unless earlier deletion is appropriate or a legal claim or obligation requires longer retention |
| Support-form rate-limit hashes | Normally no more than two hours; raw email and IP values are not stored in the rate-limit table |
| Optional email preferences and lifecycle delivery state | While the account or suppression record is needed; support-linked delivery payloads are removed with the retained support ticket |
| Local browser context and artifacts | Controlled on your device; remove them using extension, runtime, browser, or operating-system controls |
7. International transfers
Our providers and their personnel may process information outside the United Kingdom. Our Supabase project is currently hosted in a Japan region, and Stripe and Vercel operate international infrastructure. Where a restricted transfer is made, we rely on an applicable UK adequacy regulation or contractual safeguards such as the UK International Data Transfer Agreement or the UK Addendum, together with appropriate transfer assessments where required.
8. Your rights
Depending on the circumstances and your location, you may have rights to access, correct, erase, restrict, or receive your personal information, and to object to certain processing. Where processing is based on consent, you may withdraw it without affecting earlier lawful processing. These rights are not absolute; for example, we may retain transaction records required by law.
Contact us to exercise a right. We may need to verify your identity. If you are in the UK, you may also complain to the Information Commissioner's Office at ico.org.uk.
9. Security
We use access controls, row-level database policies, signed entitlements, limited-scope local pairing, encrypted network connections, secret separation, and dependency and release checks. No system is completely secure. Keep your browser, extension, local runtime, and AI tools updated, and do not share account or pairing credentials.
10. Children
Agent Logger is a professional developer tool and is not directed to children. You must be at least 18, or the age of legal majority where you live, to create a paid account unless a parent, guardian, or authorised organisation enters the agreement for you.
11. Changes
We may update this policy when the product, providers, or law changes. We will update the date above and provide an appropriate notice for a material change. The version in effect when information is processed applies to that processing.
Contact Information
Product: Agent Logger
Company: Continual Labs Limited (company no. 17387340)
Email: hello@agentlogger.com
Registered office: 23 Oaklands Road, Northfleet, Gravesend, England, DA11 8PA
Website: agentlogger.com