Legal

Privacy Policy

The short version: we collect very little, we do not sell what we have, and we will tell you everything we know about you on request. The long version is below.

1. The publisher

The Agentic Review (the "Site," "we," "our") is the data controller for personal data processed through this Site. We are an independent technical publication; the editorial mailbox at editors@agentic.review is the operational point of contact.

2. What we collect

The Site is a static publication. We do not run a comments system, we do not run an account system, and we do not run third-party advertising. The personal data we process is limited to the following:

Newsletter subscribers. If you subscribe to our dispatch via any of the signup forms on the Site, we store the email address you submit, the date of subscription, and the subscription source (which form you used). We use that data only to send the newsletter and, when material, to notify you of policy changes that affect subscribers.
Correspondence you send us. Anything you email to any of the working inboxes (editors, tips, corrections, privacy) is stored in our mail provider's inbox until either the matter is resolved or we apply our retention rule (below).
Server logs. Our hosting provider records standard HTTP server logs (timestamp, requested URL, response code, user agent, referring URL, truncated IP address). These are retained for 30 days for operations and security purposes and are not used for marketing or audience profiling.

We do not currently use cookies on this Site. We do not use third-party analytics (Google Analytics, Mixpanel, Segment, or similar). If we add a privacy-respecting analytics provider in the future, we will update this page first.

3. What we don't do

We do not sell your email address. To anyone. Ever.
We do not share your email address with any third party for marketing purposes.
We do not retarget you on advertising networks based on your visits to this Site.
We do not embed third-party trackers, pixels, or session-replay scripts.

4. Third-party processors

We use a small number of third-party processors strictly to operate the Site:

Hosting — the Site is served from a Railway-managed environment in a region selected for latency. Railway processes the server logs described above and is bound to industry-standard data processor terms.
Email / newsletter — the editorial and subscriber mailboxes are hosted by a commercial email provider under a standard data-processor agreement. We will name the provider here when we add a transactional newsletter.
Search — on-site search uses Pagefind, a static-index search library that runs entirely in your browser. No queries are sent to a third-party server.
Fonts — typographic resources are served from Google Fonts. Google receives the IP address making the request as part of normal HTTP delivery. We do not send other personal data to Google.

5. Legal basis (GDPR)

For readers in the European Economic Area and the United Kingdom, we process the personal data above on the following legal bases:

Newsletter subscriptions — your consent (Article 6(1)(a)), withdrawable at any time via the unsubscribe link in every issue or by emailing privacy@agentic.review.
Server logs — our legitimate interest (Article 6(1)(f)) in operating and securing the Site.
Correspondence — performance of a request (Article 6(1)(b)) and our legitimate interest in editorial work.

6. Retention

Newsletter subscriber data: retained until you unsubscribe, then purged within 30 days.
Correspondence: retained for at most 24 months unless the matter is ongoing or there is a legal obligation to retain longer.
Server logs: 30 days.

7. Your rights

Subject to the applicable law in your jurisdiction (GDPR, UK GDPR, CCPA/CPRA, and similar regimes), you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate personal data.
Request deletion of your personal data.
Object to processing or restrict it.
Receive a copy of your personal data in a portable format.
Lodge a complaint with your local data protection authority.

To exercise any of these rights, email privacy at agentic dot review. We respond within 30 days, or sooner if the request is straightforward.

8. International transfers

Some of our processors operate in the United States and the European Economic Area. Where personal data leaves your jurisdiction, we rely on the processor's standard contractual safeguards.

9. Children

This Site is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have, write to privacy@agentic.review and we will delete the data.

10. Changes to this policy

We will update this page if our practices change. Material changes are dated and logged at /corrections/. If a change materially expands what we collect or how we use it, we will notify newsletter subscribers before the change takes effect.