STATE PRIVACY COMPLIANCE

California Privacy Rights Notice

Applicable Law: CCPA & CPRA (Cal. Civ. Code § 1798.100) • Effective Date: September 1, 2026 • Last Updated: September 3, 2026

California Privacy Summary: This California Privacy Rights Notice supplements our main Privacy Policy and applies exclusively to California residents under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). AgentMink does not sell or share your personal information or prompt payloads.

1. Scope & Purpose of This Notice

This Notice applies solely to individual consumers, developers, and business representatives residing in the State of California (“Consumers”, “you”, or “your”) who interact with AgentMink through our website (agentmink.com), developer platform (app.agentmink.com), and API proxy gateway (gateway.agentmink.com).

Under the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA) (California Civil Code § 1798.100 et seq.), California residents are entitled to specific disclosures regarding the collection, use, disclosure, and protection of their personal information.

2. Categories of Personal Information Collected (Past 12 Months)

The table below outlines the statutory categories of personal information AgentMink has collected within the preceding twelve (12) months, along with the business purposes and third-party recipients for each category:

Statutory Category Examples Collected Business Purpose Disclosed to Service Providers
Category A: Identifiers Name, email address, IP address, unique user UUID, AgentMink API token. Account creation, API authentication, security, and developer communications. Cloudflare (Edge network), PocketBase (User store), Stripe (Billing).
Category B: Cal. Civ. Code § 1798.80(e) Name, corporate contact info, firm profile. Managing subscriptions, team collaboration, and customer support. Stripe (Billing & tax management).
Category D: Commercial Info Records of subscription tiers, invoice history, and billing records. Processing payments, preventing billing disputes, enforcing spending caps. Stripe (Payment gateway).
Category F: Internet / Network Activity Inference request timestamps, token counts, model IDs, latency (ms), HTTP status codes. Rendering usage charts, routing optimization, enforcing rate limits. Cloudflare (Workers edge isolates & KV telemetry).
Category I: Professional / Employment Info Company name, developer role, timezone preferences. Customizing dashboard telemetry, webhook alerts, and support routing. None (internal use only).
Sensitive Personal Information Third-party vendor API keys (OpenAI, Anthropic, Gemini, Groq, DeepSeek). Executing BYOK inference requests per Customer routing instructions. Encrypted via AES-256-GCM; decrypted strictly in-memory during dispatch.

3. Zero Prompt Retention & Non-Collection of Inference Contents

AgentMink operates as a stateless edge proxy gateway. We explicitly clarify that:

  • No Payload Retention: We do not log, persist, or collect the textual content of prompt inputs, uploaded documents, audio files, images, or AI model completions transmitted via API requests.
  • No Model Training: California consumer prompts and completions are never utilized, retained, or distributed to train or fine-tune artificial intelligence models.

4. “Do Not Sell or Share My Personal Information”

AgentMink does not sell personal information to third parties, data brokers, or advertisers for monetary or other valuable consideration.

Furthermore, AgentMink does not “share” personal information with third parties for cross-context behavioral advertising (as defined under Cal. Civ. Code § 1798.140(ad)). We do not deploy third-party retargeting pixels or ad-tracking scripts on our platform.

Global Privacy Control (GPC): We recognize and respect browser-based opt-out preference signals, including Global Privacy Control (GPC).

5. Your Statutory Rights Under California Law

As a California consumer, you have the following legal rights regarding your personal information:

5.1 Right to Know & Access

You have the right to request that AgentMink disclose the following information covering the 12-month period preceding your request:

  • The categories of personal information we have collected about you.
  • The categories of sources from which the personal information was collected.
  • The business or commercial purpose for collecting the personal information.
  • The categories of third parties with whom we shared or disclosed personal information.
  • The specific pieces of personal information we have collected about you in a portable format.

5.2 Right to Delete

You have the right to request the permanent deletion of personal information we have collected from you, subject to certain legal exceptions (such as complying with legal obligations, completing financial transactions, or debugging errors).

5.3 Right to Correct Inaccurate Personal Information

You have the right to request the correction of inaccurate personal information maintained in your account profile. You can update profile data directly via /dashboard/settings at any time.

5.4 Right to Limit Use of Sensitive Personal Information

We collect sensitive personal information (encrypted BYOK credentials) solely to perform the services reasonably expected by an average developer requesting inference routing. We do not use sensitive personal information for inferring characteristics or any purpose outside Cal. Civ. Code § 1798.121.

5.5 Right to Non-Discrimination

You have the right not to receive discriminatory treatment by AgentMink for exercising any of your CCPA/CPRA privacy rights. We will not deny you services, charge different prices, or provide a lower quality of service because you exercised your statutory rights.

6. How to Submit a Verifiable Consumer Request

To exercise your Right to Know, Right to Delete, or Right to Correct under California law, please submit a request through one of the following methods:

  • Authenticated Dashboard: Log in to your developer console at app.agentmink.com and navigate to Settings > Account Security to manage, export, or delete your workspace data.
  • Email Request: Send an email to california@agentmink.com or privacy@agentmink.com with the subject line “CCPA Consumer Rights Request”.

6.1 Verification Process

To protect your security, we must verify your identity before fulfilling your request:

  • Requests submitted from an authenticated dashboard session are verified automatically via existing session tokens.
  • For email requests, we will require you to confirm the request from the email address registered to the active AgentMink workspace and may request verification of recent billing metadata.
  • We will confirm receipt of your request within 10 business days and provide a full response within 45 calendar days.

6.2 Authorized Agents

You may designate an authorized agent to submit requests on your behalf. Authorized agents must provide written proof of authorization signed by you and proof of their registration with the California Secretary of State.

7. California “Shine the Light” Disclosures (Cal. Civ. Code § 1798.83)

Under California Civil Code Section 1798.83 (known as the “Shine the Light” law), California residents who provide personal information in obtaining products or services for personal, family, or household use are entitled to request and obtain from us once per calendar year information about the customer information we shared, if any, with other businesses for their direct marketing uses.

AgentMink does not disclose personal information to third parties for their direct marketing purposes.

8. Contact for California Privacy Inquiries

If you have questions, concerns, or need accommodations regarding this California Privacy Rights Notice, please contact our privacy compliance team: