# Privacy Policy — Agent Delivery Network — ADN

← Back to home 1. Who we are
 Snap Sourcer Limited ("ADN", "we", "us") operates Agent Delivery Network — a cooperative gateway for machine traffic. Our website is https://www.agent-delivery.network; the customer dashboard is https://app.agent-delivery.network.
 We are registered in England (company number 15295095). Our registered office is 9 St. Georges Yard, Farnham, England, GU9 7LW.
 For privacy enquiries contact privacy@agent-delivery.network. Our Data Protection Officer can be reached at dpo@agent-delivery.network.
 2. Scope and roles
 This Privacy Policy explains how we process personal data when you:
 • visit our marketing website or use the free offload calculator;
 • register for an ADN account or use the dashboard;
 • register an agent in the public directory; or
 • interact with ADN as a representative of a customer organisation.
 Website visitors and calculator users: we act as controller for the personal data described in section 3.1.
 Customer organisations: when you configure ADN to process traffic on your domains, you are the controller for end-user and visitor data processed at the edge. ADN acts as your processor for that traffic data. Our Data Processing Agreement (DPA), including EU Standard Contractual Clauses and the UK International Data Transfer Addendum, governs that processing and is available in the Trust Center.
 3. Personal data we collect
 3.1 Website visitors and marketing tools
 Data Source Purpose Legal basis (GDPR)
 Email address Offload calculator form (optional) Send the full offload report; sales follow-up Consent
 Scanned URL and derived scan metrics Offload calculator Provide analysis; improve product Legitimate interests / consent for follow-up
 IP address Server and edge logs Security, abuse prevention, rate limiting Legitimate interests
 Device and browser signals (User-Agent, Accept headers) HTTP requests Security, compatibility, analytics aggregates Legitimate interests
 Theme preference localStorage ( adn-theme ) Remember UI preference Legitimate interests
 We do not use third-party advertising or analytics trackers on our sites.
 3.2 Customer account holders
 Data Purpose Legal basis
 Email address Authentication (magic link), account communication Contract
 Name (optional) Account display Contract
 Billing identifiers (payment provider customer/subscription IDs) Subscription management Contract
 Third-party zone OAuth tokens (encrypted at rest) Optional zone installation Contract
 IP address and User-Agent at acceptance Record legal acceptances Legal obligation / contract
 Usage aggregates (traffic class, request counts — no raw IP stored) Service delivery, metering Contract
 3.3 Agent registrants
 Data Purpose Legal basis
 Agent name, operator, contact email, declared purpose Public directory listing and abuse contact Contract / legitimate interests
 API key hash Authenticate registered agents at the gateway Contract
 Terms acceptance timestamp Demonstrate consent to agent terms Contract
 Contact email for agents is stored for operational and abuse purposes but is not displayed in the public directory.
 3.4 Edge gateway processing (on customer domains)
 When ADN is deployed on a customer domain, the gateway may process the following at request time for classification, policy enforcement, and security:
 • IP address (from standard forwarded headers)
 • User-Agent and Accept headers
 • Request path and cache metadata
 • Bot-management signals from the edge network where available
 • Customer-provided site and agent tokens (hashed at rest)
 Retention: raw request logs (path and classification metadata only — no IP address ) are retained for 30 days , then automatically purged. Longer-term storage is limited to aggregated usage metrics (traffic class, identity tier, byte counts).
 4. Cookies and similar technologies
 We use cookies and local storage on our websites and apps. A full list, purposes, durations, and your choices are in our Cookie Policy at https://www.agent-delivery.network/cookies.
 In summary:
 Technology Name Purpose Duration
 Authentication cookie Session authentication cookies Keep you signed in to the dashboard Session / up to 7 days
 OAuth state cookie cf_oauth_state CSRF protection for zone installation OAuth 10 minutes
 Consent record adn-cookie-consent Remember your cookie choices 12 months
 Theme preference adn-theme Remember UI theme (with consent) Until cleared
 Essential cookies are used without consent where permitted by law. Functional storage (theme) requires consent via our cookie banner. We do not use third-party advertising or analytics cookies.
 5. Recipients and sub-processors
 We use carefully selected sub-processors to operate the service. An up-to-date sub-processor list with full service and data-processing details is published in the Trust Center at https://www.agent-delivery.network/trust and incorporated in our DPA (Annex III). We impose data-protection obligations on all sub-processors by contract.
 6. International transfers
 Where personal data is transferred outside the UK/EEA, we rely on:
 • adequacy decisions where applicable;
 • the EU Standard Contractual Clauses (Module 2: Controller to Processor) incorporated in our DPA; and
 • the UK International Data Transfer Addendum to the EU SCCs.
 7. Retention
 Category Retention period
 Account data Duration of account + 30 days after deletion request
 Scanner leads 24 months or until deletion request
 Request logs (gateway) 30 days (automated purge)
 Usage aggregates Duration of subscription + 24 months
 Legal acceptance records 7 years (compliance)
 Agent registry entries Until deregistration or deletion request
 8. Your rights
 Depending on your location, you may have rights to access, rectify, erase, restrict, object to processing, and data portability. Where we act as processor, please contact your organisation (the controller) first; we will assist them as required by our DPA.
 To exercise rights against ADN as controller, email privacy@agent-delivery.network. You may lodge a complaint with your supervisory authority.
 9. Security
 We implement technical and organisational measures aligned with ISO/IEC 27001 controls, including encryption in transit (TLS 1.2+), encryption at rest for sensitive credentials, role-based access control, row-level security on customer data, and regular security review. See the Trust Center security overview for more detail.
 10. Children
 ADN is a B2B service not directed at children under 16. We do not knowingly collect children's data.
 11. Changes
 We will publish material changes on this page and update the version date. For customer processing agreements, we will provide notice per the DPA.
 Effective date: 2026-08-13
 For privacy enquiries or to exercise your rights, contact privacy@agent-delivery.network . Our Data Protection Officer is at dpo@agent-delivery.network .
 Customers can review the full Trust Center at agent-delivery.network/trust .
 Ask ADN