Privacy policy

Is Agentic is a Vercel product that scores public websites for AI-agent readiness using Ora's API. When you submit a URL, we send it to Ora for analysis, receive the resulting score and findings, and publish a report that can be revisited and shared.

Do not submit private, authenticated, confidential, or secret-bearing URLs. Scan reports are public by design.

• Submitted URLs. We process the public URL you enter, including any public path or query string. Embedded credentials are rejected.
• Scan data. We store the target, score, grade, check results, evidence, recommendations, source timestamps, and generated report metadata.
• Service data. Our infrastructure may process IP addresses, request timestamps, user agents, requested paths, and response information for delivery, debugging, security, and abuse prevention. Rate-limit identifiers are derived from network information rather than displayed publicly.
• Analytics data. Vercel Web Analytics provides aggregated page-view, referrer, approximate location, device, browser, and operating-system data. Scan targets are redacted from page-view URLs. Privacy-safe product events may include a submitted host and path (never its query string), scan outcome and score, recommendation identifiers, prompt or badge copy actions, journey interactions, rescans, and alert signup outcomes.
• Score alert subscriptions. If you request score alerts, we send the email address and site you provide to Ora to operate the alert, and keep a private Redis record of the successful subscription for support and product operations. Email addresses are not sent to Vercel Web Analytics.

We use this information to run scans, render and refresh reports, maintain recent and historical results, create share images, prevent abuse, understand aggregate usage, troubleshoot failures, and improve the service. Is Agentic does not sell personal information or use submitted data for advertising.

A completed report may publicly show the submitted host or URL, its score and grade, scan date, individual findings, evidence, recommendations, and a generated social-sharing image. Reports may be indexed by search engines and referenced by third parties. A rescan may update the latest report while earlier snapshots remain in the historical archive.

Vercel operates Is Agentic and uses providers as needed to deliver the service:

• Ora receives submitted URLs and performs the underlying automated analysis. Ora may inspect public website content and use additional providers as described in its privacy policy.
• Vercel operates the product and provides hosting, serverless execution, private Blob storage, and privacy-focused Web Analytics.
• Upstash provides Redis storage for recent reports, cached results, popularity data, score alert subscription records, and rate limiting.

These providers may process data in the United States or other locations where they or their subprocessors operate.

Is Agentic does not use advertising cookies. Vercel Web Analytics does not use cookies and reports aggregated data. The theme toggle stores your light or dark preference in your browser's local storage; that preference is not sent to us as profile data. Infrastructure providers may use strictly necessary technologies to deliver and protect the service.

Scan reports and snapshots are retained to provide stable URLs, caching, and historical comparisons, generally for as long as the service operates or until removal is appropriate. Operational logs, analytics, and temporary rate-limit records follow the retention periods set by the relevant provider or our service configuration. Backups and caches may take additional time to expire after deletion.

Our private score-alert subscription records expire after one year. Ora may retain the corresponding alert subscription for as long as it is needed to deliver the report or as described in Ora's privacy policy. You may contact us to request removal.

If you own or represent a scanned site, you may ask us to correct or remove a report. Email security@vercel.com with the URL, your request, and enough information to verify your authority over the site.

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or an objection to certain processing. You may also complain to your local privacy regulator. We will verify and respond to requests as required by applicable law. We do not discriminate against people for exercising privacy rights.

We use HTTPS, access-controlled service credentials, private storage, and rate limiting to protect the service. No method of transmission or storage is completely secure. Is Agentic is not directed to children under 16, and we do not knowingly request personal information from children.

We may update this policy as the service or its providers change. The date above identifies the current version. Questions and privacy requests can be sent to security@vercel.com.