Privacy

Last updated 8 October 2026

Who we are

allowit.xyz and the AllowIt demo are run by AgenTools Labs. For any privacy question or request, write to office@allowit.xyz.

This website

• allowit.xyz sets no cookies and uses no analytics, advertising or tracking.
• Early access. When you leave your email for early access, our server stores it in a Google Form that only we can see, and we use it only to write to you about AllowIt. Ask us at any time to delete it.
• The page loads files only from allowit.xyz itself. Its security policy blocks other sources.

The demo

• Sign-in. You sign a message with your Solana wallet. Our server receives your wallet address and keeps your session for 24 hours in a cookie that only the server can read.
• Your policies. Our server stores what you do in the demo, linked to your wallet address (in Local dev, to a random ID): your policy requests and revisions, the generated policies, agent requests (amounts, recipients and the context that the agent sends), your answers, and transaction signatures. These records do not expire.
• AI services. To write a policy, we send your policy conversation to Google Gemini, or to the same model through OpenRouter as a backup. For policies with preference checks, we send the question, your original request and the agent’s request to TypeSafe. We do not send your wallet address to these services.
• Blockchain. To check transactions, our server sends wallet addresses, token accounts and transaction signatures to Solana network nodes. Transactions that you sign are public on the Solana blockchain and cannot be deleted.
• Your browser. The demo keeps your settings (network, theme, wallet name), pinned policies and records of unfinished transactions in your browser’s storage. The Native Testnet page also keeps your policy text there. To remove them, clear this site’s data in your browser.
• The demo uses no analytics, advertising or tracking.

Hosting

Vercel hosts the website and the demo. It receives standard request data, such as your IP address and browser type, to deliver and protect them.

Email

When you write to office@allowit.xyz, we receive your address and your message and use them only to reply. Cloudflare forwards the mail and Google stores it.

Your choices

Write to office@allowit.xyz to ask what we hold about your wallet address, or to have your demo records deleted from our server. Signing out deletes your session at once.

Changes

We can update this notice. The date at the top shows the current version.