Back

Effective June 17, 2026 · Version 1.0 · Source PRIVACY_POLICY.md

Agent Master Key — Privacy Policy

Effective Date: June 17, 2026 Last Revised: July 16, 2026 Operating Entity: AM Accelerated LLC, an Ohio limited liability company Contact: support@agentmasterkey.com Product: Agent Master Key ("AMK"), distributed at agentmasterkey.com

1. Who We Are and What This Policy Covers

AM Accelerated LLC ("we," "us," "our") develops and distributes Agent Master Key, a local-first macOS application that lets users store provider API keys in a locally encrypted vault on their Mac and issue scoped, revocable agent keys (amk_live_...) to AI agents. The broker that enforces access policy runs entirely on the user's Mac at http://127.0.0.1:47381. Provider secrets never leave the user's machine to reach AMK servers.

This Privacy Policy describes what personal information we collect, how we use it, and what we do not collect. It applies to:

The Agent Master Key macOS application
The local broker service (com.agentmasterkey.local LaunchAgent)
The agentmasterkey.com website and any subdomain pages
Support and billing interactions

It does not govern the third-party provider services (GitHub, Google, OpenAI, etc.) whose credentials you store inside AMK. Those services have their own privacy policies.

2. The Architecture in Plain Language

Understanding how AMK works is essential to understanding what data we can and cannot see.

What runs on your Mac:

The Agent Master Key.app SwiftUI application
A bundled Node.js broker process that starts as a macOS LaunchAgent at login
An encrypted local vault (~/.agent-master-key/state/vault.json, AES-256-GCM) that stores your provider secrets; the vault root key is managed entirely on your device
A local audit log (~/.agent-master-key/state/audit.json) stored on disk, hash-chained to detect tampering

What AMK servers do not have access to:

Your provider API keys, tokens, or bot tokens (stored only in your encrypted local vault)
The content of tool calls made through the broker (e.g., what GitHub issue was read, what Telegram message was sent)
Your local audit log entries
The amk_live_... agent keys you create (the broker's key store records only a SHA-256 hash of each key value; raw keys are shown once at creation and not stored)

Security posture: All provider secrets remain on your device in the encrypted vault. The broker's local audit log records every agent action in a tamper-evident chain. See our Trust page at agentmasterkey.com/trust for details on the current security architecture.

The broker routes agent requests through policy enforcement and calls provider APIs directly from your Mac. AMK's infrastructure does not sit in that data path.

3. Information We Do Collect

3.1 License and Account Data

For transactions completed before the Public Preview, a payment processor handled payment. We may retain from that processor and the AMK entitlement service:

Your email address (used for prior-access recovery and receipts)
Your entitlement status (active, inactive, refunded, chargeback, or manually deactivated)
The prior product-access record
Your country or tax location (used for accounting and required tax handling)

We do not receive or store your full payment-card number or bank account details. The payment processor handles those details under its own privacy policy.

Prior entitlement recovery: Legacy entitlement services remain available to preserve prior-customer rights. Version 0.0.16 Public Preview access does not depend on those services.

3.2 Public Preview Downloads

The Public Preview download page does not ask for or collect an email address, account, marketing consent, or verification challenge. The page reads the public release manifest and enables a direct download only when that manifest identifies a verified artifact and SHA-256 hash.

The release receipt used to promote and verify published software records build and artifact integrity information, not user information. It does not identify who downloaded the software.

3.3 Support Communications

If you voluntarily contact us at support@agentmasterkey.com, post in the public community, or use another support channel, we receive the content you choose to share. Public community posts are visible to others. We use feedback to respond to requests and improve the product.

We ask you not to include raw API keys, OAuth tokens, or other provider secrets in support messages. The app includes a "Copy Redacted Diagnostics" function that strips secret values before copying diagnostic output — please use that.

We retain support emails for 90 days after the issue is resolved unless applicable law requires a longer period. See Section 7 for deletion requests.

3.4 Website Analytics

The agentmasterkey.com website uses Simple Analytics, a privacy-friendly analytics service (see Section 6.2). It is cookieless and does not collect or store personal data, cross-site identifiers, or advertising profiles. It records only aggregate, non-identifying page metrics — such as page URL, referrer, country, browser type, and anonymous events like a download-button click — so we can understand overall site traffic. These events contain no personal data or identifiers. We do not use advertising cookies or ad-network trackers.

3.5 Crash Reporting and Application Telemetry

Current status: The application includes a consent-per-event crash reporter. Nothing is ever sent automatically. If Agent Master Key quits unexpectedly, then on the next launch it may ask whether to send an anonymous crash report — and a report is transmitted only if you choose "Send report" for that specific crash. You can turn these prompts off at any time in Settings → Updates ("Offer to send crash reports"), or choose "Never ask again" when prompted.

When you choose to send a report, the app scrubs it on your device and posts it once to the AMK License Service (api.agentmasterkey.com), which forwards it to our error-monitoring provider, Sentry (see Section 6.2). The License Service restricts each report to an allow-list of fields and scrubs it again before it reaches Sentry. A crash report contains only anonymous technical crash diagnostics, such as:

The crash type, exception signal, and code location (a scrubbed stack trace)
Your macOS version, and the Agent Master Key app version and build number
Fixed technical identifiers (the app bundle and process name) and a random per-crash incident id

A crash report never includes your files, provider secrets or API keys, Master Keys, agent call content, audit log entries, your license key, or your email address. The application does not otherwise collect background usage telemetry.

3.6 Aggregate and De-Identified Data

We may use the aggregate, non-personally-identifying website metrics described in Section 3.4 for product planning. The application does not send usage or active-install analytics in the background.

4. Information We Explicitly Do Not Collect

The following data is never transmitted to AMK's servers under the current architecture:

Data	Why We Do Not Have It
Provider API keys (GitHub PATs, OpenAI keys, Telegram bot tokens, etc.)	Stored only in your AES-256-GCM encrypted local vault
Provider tokens (API keys, bot tokens, access tokens)	Stored only in your AES-256-GCM encrypted local vault
The content of agent tool calls (what was read, what was sent)	The broker runs on your Mac; AMK servers are not in the execution path
Your local audit log entries	Stored only on disk at `~/.agent-master-key/state/audit.json`
`amk_live_...` agent key values	The broker's key store records only a SHA-256 hash; raw values are shown once at creation
Prompt injection attempts or agent input/output	Not logged or transmitted by AMK
The identities of AI agents you connect	Stored only in local broker state
Download email, account, or marketing profile	The Public Preview download does not request or collect them

Known limitations: (1) The local broker enforces policy on loopback and requires a valid Agent Master Key by default, but does not perform cryptographic OS-process identity gating — any local process holding a valid key can submit requests. The security of your local Mac user account is part of your security posture. See agentmasterkey.com/trust for the current threat model.

5. How We Use the Information We Collect

We use the information described in Section 3 for these purposes only:

Prior-access support: Recover and manage entitlement records for people who obtained access before the Public Preview
Public Preview distribution: Publish a manifest-backed download and its integrity hash without collecting downloader identity
Support: Respond to your support requests and diagnose reported issues
Billing: Process payments, issue receipts, and manage refunds through our payment processor
Legal compliance: Retain records required by applicable law
Product improvement: Aggregate, cookieless website traffic and voluntary community or support feedback
Diagnostics: Fix crashes and defects using the consent-based crash reports described in Section 3.5

We do not sell your personal information. We do not use your personal information for advertising or behavioral profiling.

We share personal information only in these circumstances:

6.1 Payment Processor

For prior transactions, the payment processor may process refunds, disputes, and receipts under its own privacy policy. AM Accelerated LLC remains responsible for the entitlement records it stores for prior-customer support.

6.2 Service Providers

We use a small number of service providers that process limited data on our behalf for the functions described here, subject to their own terms and privacy policies:

Cloudflare (Cloudflare, Inc.) — website and download delivery infrastructure. The Public Preview download does not use a download-receipt form or Turnstile challenge. Cloudflare may process limited request and network information needed to deliver and protect its services under its privacy policy.
Sentry (Functional Software, Inc.) — error monitoring. Receives an allow-listed, scrubbed crash report only when you explicitly choose to send one (see Section 3.5). Reports never contain secrets, keys, license keys, email addresses, or app content.
Simple Analytics — cookieless, privacy-friendly website analytics for agentmasterkey.com (see Section 3.4). It collects only aggregate, non-identifying page metrics and does not store personal data.
Resend — transactional email delivery for prior-access recovery and support messages.

We configure these services to receive only the data needed for the described function. We do not use them to build advertising profiles.

6.3 Legal Requirements

We may disclose information if required by law, subpoena, court order, or to protect the rights, property, or safety of AM Accelerated LLC, our users, or the public.

6.4 Business Transfer

If AM Accelerated LLC is acquired, merged, or undergoes a similar corporate event, your information may be transferred as part of that transaction. We will notify you via the email address on file before your information becomes subject to a materially different privacy policy.

We do not share your personal information with data brokers, advertising networks, or any third party not described in this section.

7. Data Retention and Deletion

Data type	Retention	Deletion
Prior entitlement and transaction records	For the duration required to preserve access rights plus 24 months	Contact support@agentmasterkey.com to request deletion where legally permitted
Support emails	90 days after the issue is resolved, unless applicable law requires a longer period	Contact us to request earlier deletion
Payment records	Retained as required by accounting and tax law (typically 7 years); held by the payment processor	Subject to the processor's privacy policy for payment data
Website analytics	13 months (aggregate, non-personal)	No individual data to delete
Crash reports (Sentry)	90 days	Anonymous; scrubbed of personal data before it is sent (see Section 3.5)
Cloudflare platform security data	Cloudflare may retain limited technical and security data under its own retention policies	Contact us and we will address or route a request as applicable; Cloudflare's privacy policy also applies
Local app data (vault, audit log)	Entirely under your control on your Mac	Use the uninstall instructions at agentmasterkey.com/docs/uninstall; we cannot delete this data because we do not have it

To request deletion of personal information we hold, email support@agentmasterkey.com with the subject line "Data Deletion Request" and identify the email address used for a prior transaction or support request. Do not send passwords, API keys, agent keys, payment details, or other secrets. We may ask you to verify control of the email address before acting so that another person cannot delete your records. We will respond within the period required by applicable law; unless a different period applies, our target is 30 days. Verified CCPA/CPRA requests follow the 45-day period described in Section 9.2.

8. Security

Local data (on your Mac): Provider credentials are stored in an AES-256-GCM encrypted vault file (~/.agent-master-key/state/vault.json). The vault root key is managed entirely on your device. The audit log is hash-chained to detect tampering.

Public Preview download: The download page does not collect an email address or create a user download receipt. The published release receipt contains software build and artifact-integrity information only.

Data in transit: Website and download requests, legacy license validation, and prior-customer payment-support calls use HTTPS. Provider API calls made by the broker (GitHub, Google, etc.) are made over HTTPS to provider endpoints directly from your Mac.

Limitations: Known security limitations exist (no cryptographic OS-process caller-identity gating on the local broker; a valid Agent Master Key is required by default). Distribution is via direct download from agentmasterkey.com; pre-release, early-access, internal, or test builds may be distributed before Developer ID signing, Apple notarization, or Gatekeeper readiness is complete. The Mac App Store is not the distribution channel. See agentmasterkey.com/trust for the current threat model.

We implement reasonable administrative, technical, and physical security measures, but no system is perfectly secure. If you believe you have discovered a security vulnerability, please report it to security@agentmasterkey.com rather than publicly disclosing it.

9. Your Rights

9.1 All Users

You may:

Request a copy of personal information we hold about you
Request correction of inaccurate personal information
Request deletion of your personal information (subject to legal retention obligations)
Withdraw consent where processing is based on consent

To exercise these rights, contact support@agentmasterkey.com.

9.2 California Residents (CCPA / CPRA)

California residents have the right to:

Know what personal information we collect and how it is used
Request deletion of personal information
Opt out of the sale of personal information (we do not sell personal information)
Non-discrimination for exercising your rights

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

To submit a verifiable consumer request, email support@agentmasterkey.com with "CCPA Request" in the subject line. We will respond within 45 days.

If you are located in the European Economic Area, United Kingdom, or Switzerland, the following applies:

Legal basis for processing:

License fulfillment and support: contract performance (Article 6(1)(b))
Legal compliance: legal obligation (Article 6(1)(c))
Website analytics: legitimate interests (aggregate, cookieless, non-identifying — see Section 3.4)
Crash reporting: your consent (Article 6(1)(a)), given per crash report (see Section 3.5)

Data controller: AM Accelerated LLC, contact: support@agentmasterkey.com

International transfers: If personal information is transferred outside the EEA/UK, we rely on Standard Contractual Clauses to ensure adequate protection.

Right to lodge a complaint: You may lodge a complaint with your local supervisory authority. In the EU, find your authority at: https://edpb.europa.eu/about-edpb/about-edpb/members_en

10. Children's Privacy

Agent Master Key is not directed to children under 13 (or under 16 where applicable). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, contact support@agentmasterkey.com and we will delete it promptly.

11. Changes to This Policy

We will post changes to this policy at https://agentmasterkey.com/privacy and update the "Last Revised" date at the top. For material changes, we may provide additional notice where required by law, such as a notice on the website or an administrative message to affected users. Continued use of AMK after the effective date constitutes acceptance of the updated policy.

12. Contact

Privacy inquiries: AM Accelerated LLC Email: support@agentmasterkey.com

Security vulnerabilities: security@agentmasterkey.com

Appendix: What Data Stays Local (Summary for Technical Users)

The following files are entirely on your Mac. We have no access to them, no backup of them, and no ability to recover them if you lose them.

Location	Contents
`~/.agent-master-key/state/vault.json` (AES-256-GCM)	Encrypted provider credentials (API keys and tokens) — root key managed locally
`~/.agent-master-key/state/audit.json`	Hash-chained local audit log of broker decisions
`~/.agent-master-key/state/connections.json`	Connection metadata (provider, account alias, health state; no plaintext secrets)
`~/.agent-master-key/state/master-keys.json`	Agent key SHA-256 hashes, scopes, and revocation status (no raw key values)

To remove all local AMK data, first uninstall the app and then run the full reset:

# Remove the app binary only:
./script/uninstall_macos.sh --verify

# Remove all local state, logs, LaunchAgent, and app-support data
# (preview first with --dry-run):
./script/reset_macos.sh --dry-run
./script/reset_macos.sh --yes --all --verify

Uninstalling the app does not affect the third-party provider accounts you connected; you must revoke those tokens separately in each provider's dashboard.