Privacy policy

Is Agentic is a Vercel product that scores public websites for AI-agent readiness using Ora's API. When you submit a URL, we send it to Ora for analysis, receive the resulting score and findings, and publish a report that can be revisited and shared.

Do not submit private, authenticated, confidential, or secret-bearing URLs. Scan reports are public by design.

• Submitted URLs. We process the public URL you enter, including any public path or query string. Embedded credentials are rejected.
• Scan data. We store the target, score, grade, check results, evidence, recommendations, source timestamps, and generated report metadata.
• Service data. Our infrastructure may process IP addresses, request timestamps, user agents, requested paths, and response information for delivery, debugging, security, and abuse prevention. Rate-limit identifiers are derived from network information rather than displayed publicly.
• Analytics data. Vercel Web Analytics provides aggregated page-view, referrer, approximate location, device, browser, and operating-system data. Scan targets are redacted from page-view URLs. Privacy-safe product events may include a submitted host and path (never its query string), scan outcome and score, recommendation identifiers, prompt or badge copy actions, journey interactions, rescans, and marketing signup outcomes.
• Product update and marketing signups. If you sign up for Vercel product updates and marketing emails, we keep your normalized email address, the source site, the consent text and privacy-notice URL shown to you, and the signup timestamp in a private, project-connected PostgreSQL database. We do not send this information to Ora or Vercel Web Analytics.

We use this information to run scans, render and refresh reports, maintain recent and historical results, create share images, prevent abuse, understand aggregate usage, troubleshoot failures, and improve the service. We use email addresses submitted through the marketing form only for the requested Vercel product updates and marketing emails. Is Agentic does not sell personal information.

A completed report may publicly show the submitted host or URL, its score and grade, scan date, individual findings, evidence, recommendations, and a generated social-sharing image. Reports may be indexed by search engines and referenced by third parties. A rescan may update the latest report while earlier snapshots remain in the historical archive. Reports whose submitted URL contains a query string are excluded from Recent Scores, popularity rankings, sitemap entries, and build-time prerender lists.

Vercel operates Is Agentic and uses providers as needed to deliver the service:

• Ora receives submitted URLs and performs the underlying automated analysis. Ora may inspect public website content and use additional providers as described in its privacy policy.
• Vercel operates the product and provides hosting, serverless execution, private Blob storage, and privacy-focused Web Analytics.
• Neon provides PostgreSQL storage for durable reports, journey evidence, popularity data, and marketing consent records.
• Upstash provides operational Redis storage for rate limiting, scan coordination, and temporary failover reads during the database cutover.

These providers may process data in the United States or other locations where they or their subprocessors operate.

Is Agentic does not use advertising cookies. Vercel Web Analytics does not use cookies and reports aggregated data. The theme toggle stores your light or dark preference in your browser's local storage; that preference is not sent to us as profile data. Infrastructure providers may use strictly necessary technologies to deliver and protect the service.

Scan reports and snapshots are retained to provide stable URLs, caching, and historical comparisons, generally for as long as the service operates or until removal is appropriate. Operational logs, analytics, and temporary rate-limit records follow the retention periods set by the relevant provider or our service configuration. Backups and caches may take additional time to expire after deletion.

Private product-update and marketing signup records are retained until you unsubscribe or request removal. They are not part of the public scan archive.

If you own or represent a scanned site, you may ask us to correct or remove a report. Email security@vercel.com with the URL, your request, and enough information to verify your authority over the site.

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or an objection to certain processing. You may also complain to your local privacy regulator. We will verify and respond to requests as required by applicable law. We do not discriminate against people for exercising privacy rights.

We use HTTPS, access-controlled service credentials, private storage, and rate limiting to protect the service. No method of transmission or storage is completely secure. Is Agentic is not directed to children under 16, and we do not knowingly request personal information from children.

We may update this policy as the service or its providers change. The date above identifies the current version. Questions and privacy requests can be sent to security@vercel.com.