Privacy & Telemetry Policy

1. Zero-IP Storage Policy (storesIpAddresses: false)

Agent Provider Depot does not store raw client IP addresses in any persistent database, analytics table, or public log. Rate limiting uses transient per-instance in-memory counters or ephemeral daily-rotated salted hashes solely to prevent abuse.

• No tracking cookies or third-party ad pixels.
• Uncovered query demand log (/api/coverage/requests): stores only normalized, lowercased unmatched domain tokens (≤ 6 words, stripped of URLs, emails, and numbers) at day granularity.
• Ephemeral session hashes: rotated daily and never linked to personal identity.

2. Quarantine Write Intake & Neutrality Firewall

Submissions to POST /api/feedback, POST /api/insights, and POST /api/corrections are treated as untrusted external input:

• When live catalog writes are frozen on serverless edge instances, valid payloads are accepted in quarantine intake mode (HTTP 202, quarantined: true, scoreEffect: "none") with a deterministic receipt ID.
• Community submissions and provider claims never automatically mutate provider scores, rankings, or Depot Picks (Neutrality Firewall).
• Submitted strings are wrapped in untrusted-content envelopes and stripped of prompt-injection patterns before any display.

3. Operator & Security Contact

Agent Provider Depot is operated by Signalry. For privacy inquiries, data removal requests, listing corrections, or responsible security disclosures, contact depo@mail.grokbot.com.

Related documents: Data Terms · Methodology · Provider Claim Program