Privacy Policy

1. Scope & Australian Privacy Act Compliance

Agentic Scam (agenticscam.com) handles personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), alongside applicable international protections (GDPR, UK GDPR, and CCPA/CPRA). For any privacy question, access request, correction, or deletion request, email privacy@agenticscam.com. Statutory entity and postal details are set out in Section 8 below.

2. Exact Personal Information We Collect

When you submit an email signup or contact form on agenticscam.com, our Cloudflare Pages Function collects and stores only the following fields:

• Email address: validated and stored in lowercase so we can send you future updates from Agentic Scam once email dispatches begin.
• Site domain & form/page source: the domain name (agenticscam.com) and the page path or form identifier where you signed up.
• Express consent record: the boolean value of the unticked consent checkbox, the exact consent wording shown, the consent text version identifier (2026-11-v2-cloudflare-d1), and the UTC timestamp of submission.
• Hashed IP address (rate limiting only): a one-way salted SHA-256 hash of your IP address used strictly to enforce per-IP rate limits and prevent automated abuse. We do not store your raw IP address in our subscriber database.
• Optional B2B contact fields (contact page only): if you use a business inquiry form, your name, organisation, short inquiry note, and (where applicable and separately ticked) optional partner-referral consent.
• What we never collect: we never request or accept payment card numbers, bank account / BSB / IBAN details, government ID or passport numbers, or passwords, and our forms actively block submissions matching those patterns.

3. Why We Collect It & Current No-Email Status

We process your email address solely to send synthetic-voice forensic briefings, out-of-band safe-word protocol templates, autonomous-agent security advisories, and responses to editorial inquiries. We never request or accept bank, card, passport, or password details.

No emails are sent yet: our system currently stores your email address and consent record only. No automated confirmation emails, autoresponders, or newsletter broadcasts are sent by the system at this stage. When updates from Agentic Scam begin, every commercial electronic message will include clear sender identification, postal contact details, and a functional one-step unsubscribe facility in accordance with the Australian Spam Act 2003 (Cth).

4. Where Your Data Is Stored (Cloudflare D1 Isolation & APP 8 Notice)

• Cloudflare D1 Database (agenticscam-leads): form submissions are stored in a dedicated Cloudflare D1 serverless SQLite database scoped to agenticscam.com, operated by Cloudflare, Inc. (United States and global edge network). Each website has its own isolated D1 database so subscriber lists are never commingled across domains.
• Cloudflare Turnstile & Web Analytics: Cloudflare Turnstile verifies form submissions server-side via Cloudflare's Siteverify API without ad-tracking cookies, and Cloudflare Web Analytics measures aggregate traffic without cookies or cross-site tracking.
• Overseas disclosure (APP 8): under Australian Privacy Principle 8, please note that Cloudflare, Inc. is headquartered in the United States and processes data across global infrastructure (including Australia and the United States). For EEA/UK visitors, transfers rely on Cloudflare's Data Processing Addendum and Standard Contractual Clauses (SCCs).
• Affiliate attribution (only when you click a labelled sponsored link): Agentic Scam participates in optional preventative security and privacy affiliate programs: Incogni (automated people-search and data-broker opt-out in AU, US, UK, EU, and CA), Yubico (YubiKey FIDO2 hardware security keys), and Aura (credit lock and identity monitoring for US residents only). Free official bank, police, and government reporting portals always appear first. Every affiliate link carries rel="sponsored nofollow" and the visible label "Ad: we earn a commission if you buy through this link." We never recommend or link paid "fund recovery" services.

5. How Long We Keep Information (Retention)

• Email signup & inquiry records in Cloudflare D1: kept until you ask for deletion or unsubscribe, or deleted after 24 months of inactivity once email updates commence.
• Hashed-IP rate-limit counters: automatically purged from D1 after 24 hours; transient edge security logs expire within 30 days.

6. How to Request Access, Correction, or Deletion

Under Australian Privacy Principles 12 and 13 (and GDPR/CCPA where applicable), you can request a copy of the record we hold for your email address, ask us to correct it, or ask us to delete it permanently at any time by emailing privacy@agenticscam.com from or referencing the email address you submitted. Deletions are executed directly against agenticscam.com's Cloudflare D1 database within 30 days (and typically within 5 business days) at zero cost.

Privacy complaints & OAIC: if you believe we have breached the Australian Privacy Principles, email privacy@agenticscam.com and we will respond in writing within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. Suspected eligible data breaches are assessed and notified in accordance with the Australian Notifiable Data Breaches (NDB) scheme.

7. GDPR, UK GDPR, California CCPA/CPRA & Transfer Notice

For EEA and UK visitors, our lawful basis for storing your email is your consent (Article 6(1)(a) GDPR), withdrawable at any time via privacy@agenticscam.com, and our lawful basis for Turnstile verification and hashed-IP rate limiting is legitimate interests (Article 6(1)(f)). For California residents, we do not sell or share personal information under the CCPA/CPRA.

Because agenticscam.com stores its subscriber list in an isolated per-site Cloudflare D1 database, if agenticscam.com is ever sold or transferred as a standalone property, only records collected on agenticscam.com may be transferred to the incoming owner, who will remain bound by this Privacy Policy for information collected under it. Subscribers will receive advance notice before any transfer so deletion can be requested first.

8. Statutory APP 1.4 Entity & Contact Record

agenticscam.com is operated by Muse & Moonlight (museandmoonlight.com), ABN 18 656 044 027, postal address 66 Canning Highway, South Perth WA 6151, administrative contact admin@museandmoonlight.com. For fastest handling of site-specific access or deletion requests, contact privacy@agenticscam.com.