Privacy policy

Agent Data Tools is operated by SpellzCode in Sweden. This page says what the service stores when you or your agent use it. Contact: spellz111122@gmail.com.

What we store

• Request counts. Per tool and per day: how many calls were quoted, paid, free, failed or paid with credits. No inputs or outputs are stored in these counts.
• Request processing logs. Our host, Cloudflare, records request logs (including IP address, user agent, URL and timing) for operations and debugging, kept for Cloudflare's standard retention period. Tool inputs passed in the URL appear in those logs.
• Free calls. A one-way hash of your IP address and a count of free calls used. The IP address itself is not stored for this.
• Crypto payments (x402). For each settled payment: the paying wallet address, amount, network, transaction reference and tool. Blockchain payments are public by nature.
• Agent memory. What you save with the memory tools (/memory/set), under a one-way hash of the namespace you choose, until it expires (at most 30 days) or you delete it with /memory/delete. Anyone who knows a namespace can read it.
• Card credits. A one-way hash of your API key with its balance and purchase history, and the Stripe Checkout or payment reference that created it. The key itself is kept with that reference only so that reopening your claim link shows the same key. Card details are handled by Stripe and never reach us.
• Sign-in from apps (OAuth, for example ChatGPT). The app's registration (its name and redirect addresses) and one-way hashes of the access and refresh tokens issued to it, linked to your account. Tokens stop working when they expire.

Why we keep it

Only to run the service: to answer and bill tool calls, to count and limit free calls, to keep a payment and credit record, to sign apps in, and to find and fix failures. Nothing is used for advertising or profiling.

How long we keep it

• Request logs: Cloudflare's standard retention (days, not months).
• Agent memory: until you delete it, at most 30 days.
• Sign-in tokens: until they expire.
• Request counts, free-call counts, payment and card-credit records: while the service runs, because they are the accounting record. You can ask us to delete card-credit records (see below).

What we do not do

• We do not sell or share data with advertisers, and we do not track you across other sites. The pages set no cookies.
• We do not keep the content you ask a tool to read or compute, beyond the request logs above and what you save with the memory tools.
• Tools that read the web fetch the public URL you give them; that site sees a request from our servers.

Third parties

Cloudflare (hosting, and the AI models behind the AI tools: the text you send to an AI tool is processed by Cloudflare Workers AI to produce the answer), Brave (the query you send to the web and news search tools), Stripe (card payments), Coinbase Developer Platform (x402 payment settlement), and the public data sources each tool names in its description. They receive only what is needed to answer that call.

Hosted pages

HTML published through /page/publish is stored for the number of days the publisher chose (at most 7) and then deleted; its text is sent to the moderation model before storage. We keep no record of who published a page beyond the payment receipt.

Your choices

To ask what we hold about an API key or wallet, or to have card-credit records deleted (this ends the key's balance), write to spellz111122@gmail.com.

Last updated 26 October 2026. Agent Data Tools · Privacy · Terms · Support