Privacy Policy

This Privacy Policy explains how sharemyagent.com ("we", "us", or "our") collects, uses, and protects information about you when you use our website and services (the "Service"). We are committed to handling your data responsibly and transparently.

1. Information We Collect

Information you provide directly

• Account information: email address, username, and password when you register.
• Profile information: any display name or username you choose to set.
• User Content: configuration files, titles, and descriptions you submit to the Service.
• Communications: messages you send us via email or support channels.

Information collected automatically

• Usage data: pages visited, files viewed, search queries, and votes cast.
• Log data: IP address, browser type, operating system, referring URL, and timestamps.
• Cookies: session cookies used for authentication. We do not use advertising or tracking cookies.

Information from third parties

• Google OAuth: if you sign in with Google, we receive your name and email address from Google. We do not receive your Google password or access to your Google account beyond authentication.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Service.
• Authenticate your identity and maintain your session.
• Display your username alongside content you have submitted.
• Send transactional emails such as email verification, password resets, and submission status updates.
• Detect and prevent fraud, abuse, and violations of our Terms of Service.
• Analyse usage patterns to improve user experience (using aggregated, anonymised data).
• Respond to support requests and communications.

We do not sell your personal data. We do not use your data to serve targeted advertising.

3. How We Share Your Information

We share your information only in the following circumstances:

• Publicly visible information: your username and submitted files are visible to all visitors of the Service. Your email address is never displayed publicly.
• Service providers: we use third-party providers for hosting, email delivery, and error monitoring. These providers process data on our behalf and are contractually obligated to protect it.
• Legal requirements: we may disclose your information if required to do so by law, court order, or governmental authority, or to protect the rights, property, or safety of sharemyagent.com or others.
• Business transfers: in the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

4. Cookies and Session Storage

We use a single HttpOnly session cookie (jwt) to authenticate your session. This cookie:

• Is set only when you sign in.
• Is not accessible to JavaScript on the page.
• Is cleared when you log out or when it expires.
• Is not used for tracking or advertising.

We also use a companion session_active cookie (non-HttpOnly) so the frontend can detect whether you are logged in without reading the JWT. It contains no personal data.

We do not use any third-party analytics cookies (e.g. Google Analytics). We do not serve advertising and use no advertising cookies.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal purposes. Submitted files attributed to a deleted account may remain on the Service in anonymised form (username replaced with "deleted user").

Server log data is retained for a maximum of 90 days.

6. Data Security

We take reasonable technical and organisational measures to protect your data, including:

• Passwords hashed using bcrypt with a suitable cost factor.
• All data transmitted over HTTPS/TLS.
• Database access restricted to backend services only.
• JWT tokens signed with a secret key and stored in HttpOnly cookies.

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If we become aware of a security breach affecting your data, we will notify you as required by applicable law.

7. Your Rights

Depending on your location, you may have the right to:

• Access: request a copy of the personal data we hold about you.
• Correction: request that inaccurate data be corrected. You can update your username and email directly from the My Account page.
• Deletion: request that we delete your personal data ("right to be forgotten").
• Portability: request your data in a machine-readable format.
• Objection: object to certain processing of your data.

To exercise any of these rights, email us at privacy@sharemyagent.com. We will respond within 30 days. For users in the European Economic Area (EEA) or United Kingdom, you also have the right to lodge a complaint with your local data protection authority.

8. Children's Privacy

The Service is not directed at children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

9. International Data Transfers

Our servers are located in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer. We take steps to ensure that your data receives an adequate level of protection wherever it is processed.

10. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party services you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (if you have an account) or by posting a prominent notice on the Service. The "Last updated" date at the top of this page reflects the most recent revision. Your continued use of the Service after changes take effect constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us at: