Privacy policy

Effective: October 21, 2026

AgentProof is a free AI skills certificate, run by AgentProof LLC. This page explains what we collect when you use joinagentproof.com and app.joinagentproof.com, why we collect it, who helps us handle it, and how to have it deleted.

Questions? Email hello@joinagentproof.com.

What we collect

When you use a form on our homepage. If you join the waitlist, we collect what you type: your name, email, role or company, team size, what you're interested in, and any message. Our form provider also records your IP address and browser details with each form.

When you take the assessment. We collect:

• your name and email;
• your role, industry, and the AI tools you use;
• your chat answers, including your safe-use answers;
• the output from your live task;
• proof of advanced work, if you paste or link it;
• your scores, level, how long you took, and the grader's notes.

When we confirm it's you. Before we issue a certificate, we check that it's really yours.

• Selfie. We take one photo from your camera and store it privately. It never appears on your certificate or verify page. We don't run face matching on it.
• Email code. We email you a one-time code. We keep only a scrambled (hashed) copy of it, never the code itself.
• LinkedIn, if you choose it. If you sign in with LinkedIn, we receive your LinkedIn name, email, and account ID. We don't keep your LinkedIn sign-in token. We keep a scrambled copy of your account ID so we can spot one account being used for many certificates.

Your certificate. When you finish, we create your certificate. It holds your name, level, scores, top strength, the role and industry you were assessed in, the live task you did, and the date it was issued.

Invites. If you invite friends from your results page, we keep the name and email you enter for each friend. If your agency invites you, we keep your agency's name, your team lead's email, your name and email as your agency gave them to us, and whether you've started or finished. We also note when an invite link is opened.

Emails we send. We keep a record of each email we send you: when it was sent and its message ID.

Community list. If you join our community list after your results, we keep your email, the community you picked, and your level.

IP addresses. To stop abuse, an earlier version of our assessment counted requests per IP address per hour. Those records include the IP address. Today's assessment doesn't store your IP address with your results.

What we don't collect. We don't collect passwords. We don't use analytics, ad trackers, or advertising cookies. Your browser saves a small key so you can get back to your results page. That key stays on your device.

Why we use it

We use your information to:

• run the assessment and grade it;
• confirm your certificate is really yours;
• issue your certificate and show your verify page;
• send the emails you need: your invite, one reminder, your code, and your certificate;
• give your agency team totals, if your agency invited you;
• stop cheating and abuse;
• reply when you contact us.

We don't sell your information.

Who handles it for us

We use a few outside services to run AgentProof. Each one gets only what it needs.

• Anthropic provides the AI that runs the chat and grades your work. It receives your answers, task output, proof, role, industry, and tools. It doesn't receive your selfie. Until October 19, 2026, these requests went through Netlify's AI Gateway, which passed them on to Anthropic.
• Resend sends our emails. It sees who each email goes to and what it says, including your certificate PDF.
• LinkedIn handles sign-in, only if you choose to sign in with LinkedIn.
• Netlify hosts our website and app, stores app data, receives homepage forms, and keeps technical logs.
• ImprovMX and Google (Gmail) handle email forwarding for hello@joinagentproof.com. ImprovMX forwards mail sent to that address, and Gmail hosts the inbox it lands in.

What your agency sees

If your agency invited you, your team lead gets a private report link. The report shows team totals only: how many people were invited and finished, the spread of levels, safe-use results, how many caught the planted error in their task, the AI tools in use, and a breakdown by role.

• The report opens only after at least 3 people have finished.
• Role groups under 3 people are combined so no one can be singled out.
• The report never shows your name, email, answers, task output, or selfie.

Your certificate is yours. If your verify page is public, anyone with the link can see it, including your agency.

Your public certificate page

When you finish, your certificate gets a public verify page and badge. Anyone with the link can see:

• your name and level;
• the role and industry you were assessed in;
• the date you earned it and the live task you did;
• your skill breakdown and top strength;
• your certificate ID.

It never shows your answers, your selfie, or your email.

To hide it, open your results page and tick "Hide my public page and badge." Visitors will then see that the certificate is private. You can make it public again the same way.

Your certificate and verify page are free forever and don't expire. We may hide a certificate that's been misused, as our terms explain.

How long we keep it

• Selfies: 90 days after you finish the assessment.
• IP address records used to stop abuse: 7 days.
• Chat answers, task output, and proof of work you upload or link: 12 months after you finish the assessment.
• Your certificate record (your name, level, date, and skill breakdown): until you ask us to delete it. Your certificate and verify page are free forever and don't expire.
• Team report totals: 24 months after the team's last activity.
• Records of emails we send you, such as invites and results emails: 12 months after each email is sent.
• Names and emails on invites that were never used: 90 days after the invite expires.
• Waitlist entries: until you ask us to delete them, or 24 months with no activity.
• Team inquiries sent through our homepage: 24 months with no activity.
• Backups: the same time limits apply. Backup copies are removed within 30 days after the original is deleted.

After that, we delete it. You can ask us to delete your data sooner at any time.

How to delete your data

Email hello@joinagentproof.com from the address you used and ask us to delete your data. We'll delete it within 30 days and let you know when it's done.

We delete your answers, task output, and proof; your selfie; your result and certificate, including your public verify page; our records of emails sent to you; your team report entry; your community list entry; and your waitlist entry, if you ask. Once deleted, your certificate stops working and can't be brought back.

We keep a note that your invite was used, with your name and email removed, so our counts stay correct. If you invited friends, we remove your email from their invites.

What our delete tool doesn't cover

Some copies sit outside the tool we use to delete your data:

• Email logs at Resend. Copies of the emails we sent you. Resend keeps these under its own policy.
• Homepage forms in Netlify Forms. These include your IP address and browser details. We can remove them by hand when you ask. Otherwise Netlify keeps them under its own policy.
• Hosting function logs at Netlify. Technical log lines, some of which can include your email or result ID. Netlify keeps these under its own policy.
• Grading AI logs at Anthropic. What we sent to the AI to grade your work. Anthropic keeps these under its own policy.
• IP address records used to stop abuse. These are stored by IP address, not by email, so we can't match them to you. They're removed on the schedule above.
• The scrambled LinkedIn account ID, if you used LinkedIn. We keep it as long as your certificate record.
• Our own backups. Copies are removed within 30 days after the original is deleted.

Changes to this policy

If we change this policy, we'll update the date at the top.

Contact us

Email hello@joinagentproof.com. A real person will reply.