Privacy notice for audit requests and the Full report

Last updated: 13 November 2026. Notice under art. 13 of Regulation (EU) 2016/679 (GDPR). This is a translation of the Italian notice, which prevails in case of discrepancy.

Controller

The individual (natural person) who runs the Agent90 project (trade name, unregistered mark). Contact, also for privacy matters and to request the controller's full identity details: aiworkflowlab.channel@gmail.com.

What data we process

• The email address you send with your request and, if you give it, the name of your property.
• The website address to be analysed and the content of your message.
• If you buy the Full report: your email, amount, outcome and date of the payment, communicated by Stripe; the data you send us to perform the service (website address and, if you wish, competitor websites); your request, if any, to start the service right away, with date and time; if you withdraw, your withdrawal statement (name, contract indicated, email) with the date and time it was sent.
• Public technical data of the website (code of public pages, HTTP headers, robots.txt, sitemap, an image of the home page) read to produce the report.

We do not ask for passwords or access to your website. Card or payment-method details are entered only on Stripe's page and never reach us. The audit request form does not send or store data: it prepares an email that leaves from your own email program.

Why and on what legal basis

• Producing and sending you the audit you requested and answering your messages: performance of pre-contractual measures at your request (art. 6.1.b GDPR).
• Mentioning, in the same reply, the paid Full report, which you can ignore: same basis. We do not sign you up to newsletters and do not send other promotional messages.
• Buying the Full report: performing the contract you conclude with us, collecting the price and sending you the confirmation (art. 6.1.b GDPR); recording the date and time of your express request to start the service right away and, if you withdraw, of your withdrawal statement and of the acknowledgement of receipt we send you, to evidence the exercise of your consumer rights and to comply with art. 54-bis of the Italian Consumer Code; keeping receipts and accounting records for legal, including tax, obligations (art. 6.1.c GDPR).
• Keeping evidence of your request: legitimate interest in handling any disputes (art. 6.1.f GDPR).

Providing your email and website address is necessary to receive the audit; without them we cannot perform it.

How the processing works

The report is generated by the project's software. Part of the work (reading requests, drafting replies and the report) is carried out by an artificial intelligence assistant under the controller's responsibility. The report does not produce decisions with legal effects on you.

Providers involved and transfers

• Hetzner Online GmbH (Germany): servers where the software runs and reports are stored; data in the European Union.
• Stripe (Stripe Payments Europe Ltd., Ireland, and Stripe group companies): handles the payment as an independent controller for payment operations and tells us your email, amount and outcome; payment data stay with Stripe, see its privacy policy.
• Google (Gmail and Google Apps Script): the mailbox that receives requests and sends reports, and the script that receives the statement submitted through the online withdrawal form (/recesso/en/) and sends the receipt: no other provider involved.
• Anthropic: provider of the AI model that may process the text of requests and reports.
• GoatCounter (goatcounter.com, run by Martin Tournoij, Ireland; Hetzner servers in Finland and Germany): aggregate visit statistics, see below.
• GitHub (GitHub Pages): hosts this page and may record technical browsing data, such as the IP address, for the security of the service.

Google, Anthropic and GitHub may process data in the United States or other non-EU countries, with the safeguards of arts. 44-49 GDPR set out in their terms (for example the EU-US Data Privacy Framework or standard contractual clauses). We do not sell or hand over data to third parties.

For how long

Email, request and report: 12 months from the last contact, then we delete them. You may ask for earlier deletion at any time. Payment data, receipts and the record of early start and withdrawal: for as long as accounting and tax obligations require (generally 10 years) and, where necessary, to establish or defend legal claims.

Your rights

You may ask for access, rectification, erasure, restriction, objection and portability (arts. 15-22 GDPR) by writing to aiworkflowlab.channel@gmail.com. You may lodge a complaint with the Italian Data Protection Authority (Garante).

Website visit statistics

The pages of agent90ia.github.io (this one included) do not use cookies or other data stored in your browser. To know how many people visit them we use GoatCounter: your browser loads a script from gc.zgo.at and sends to goatcounter.com the page visited, the referring page (or a campaign label such as ?c=... in the address), the browser and operating system, the language, the screen width and the country derived from the IP address. We also count, only as anonymous totals, clicks on the buttons leading to the audit request or to payment and the opening of your email program from the form: the event name does not contain the website address or the email you enter.

According to the provider, GoatCounter keeps only aggregate counts per hour and per day, does not store the IP address or the full User-Agent header and uses no tracking identifiers; to avoid counting the same visit twice it keeps in memory, for at most 8 hours, an association between site, IP and browser and a random code, which is not saved in the database. We only see totals and cannot identify you. Basis: legitimate interest in measuring use of the site in an anonymous, aggregate way (art. 6.1.f GDPR); you may object by blocking gc.zgo.at scripts in your browser, with no consequence for using the site.

Apart from this and the hosting's technical logs mentioned above there is no third-party content. If this changes, we will update the notice first.

Back to the Full report · Versione italiana · Terms of sale