← AgentBarista
Not legal advice. Drafted to a high standard but not yet reviewed by a lawyer; attorney review will follow before scaling.

Privacy Policy

Version 1.2 · Effective 2026-07-27 · Omer Zada, Israel

This Privacy Policy explains how Omer Zada, an individual sole proprietor in Israel (“we”, “us”), handles information in connection with the AgentBarista app (the “App”) and the https://agentbarista.com website (the “Site”). AgentBarista is built to be local-first: the App works without an account and never opens your files. Nothing about your work is transmitted off your Mac.

1. The short version

2. Who is responsible

The data controller is Omer Zada, Israel. Contact: support@agentbarista.com. When the business is later incorporated, the controller will be updated to the company and this Policy revised.

3. What the App processes

On your device only (not sent to us): OS information about running processes, including their full command lines, and CPU usage; the names and modification times of certain agent-related files; and, only if you grant macOS Accessibility permission, the on-screen text of the agent apps you enable and of the terminal applications the App supports — read locally to detect activity and never transmitted. Used solely on your Mac to decide whether to stay awake. You should understand what those last two inputs can contain: a process command line includes any prompt text passed on it, and on-screen text includes whatever is visible in that window, which for a code editor or terminal can include your code. In both cases the text is compared against short status phrases in memory and then discarded — it is never written to disk, never included in the App's log file, and never transmitted. The App never opens your files, and the content of your files is never transmitted. Your settings, your local usage statistics, and a local record of which terms version you accepted are stored on your device only.

License validation: if you buy a Paid License, the App stores your license key in the macOS Keychain and contacts Lemon Squeezy to activate and periodically validate it. This may include your license key, a device/instance name (your Mac's hostname, which may contain a name you chose), and the activation identifier assigned by Lemon Squeezy, used only to enforce seats and detect abuse — never file contents, paths, prompts, or activity. This is the App's only outbound network call.

4. What the Site processes

5. Payments

Purchases are processed by Lemon Squeezy, the merchant of record and an independent controller for payment data, under its own privacy policy. We receive only limited order/license information (such as your email and license key) needed to provide and support the Software.

6. How we use information

To provide and maintain the Software; activate/validate licenses and prevent abuse; respond to support; understand aggregate Site usage; and meet legal obligations. We do not sell your personal information and do not use it for advertising.

7. Legal bases (EEA/UK)

Where GDPR/UK GDPR applies, we rely on contract (to provide the licensed Software you bought — e.g. license validation), legitimate interests (security, preventing abuse, aggregate usage), consent where required, and legal obligation (e.g. tax records).

8. Sharing

Only with: Lemon Squeezy (payments/licensing); our providers as processors — Vercel (hosting), Typeform (the waitlist and team-enquiry forms, which collect the email address you enter), and Cloudflare (DNS, support-email routing, and Web Analytics); and authorities where required by law. We do not otherwise sell or rent personal information.

9. Retention

Deleting your data / uninstalling. Quitting and uninstalling the App stops all detection. Your only local data is your settings, the accepted-terms record, and (if purchased) the license key in the macOS Keychain. Clear it with the App's reset/remove-license controls, by deleting the App and its folder under ~/Library/Application Support/AgentBarista/, and by removing its Keychain entry. For records held by us or Lemon Squeezy, email support@agentbarista.com (subject to the retention periods above).

10. International transfers

We are based in Israel (which the EU recognizes as providing an adequate level of data protection, so EEA→Israel transfers need no extra mechanism). Our providers may process data in other countries, including the United States (Lemon Squeezy, Vercel, Cloudflare); where required, those US transfers rely on the providers' Standard Contractual Clauses and/or Data Privacy Framework commitments, as set out in their data-processing terms.

11. Your rights

Depending on location, you may have rights to access, correct, delete, port, or object to/restrict processing. California residents have CCPA/CPRA rights; we do not “sell” or “share” personal information as defined. Israeli residents have rights of access and correction under the Israeli Privacy Protection Law.

To exercise any right, email support@agentbarista.com with enough detail to verify your request. We respond within the time required by law (generally 30 days under GDPR/UK GDPR, or 45 days under the CCPA, extendable where permitted). Exercising your rights is free and we will not discriminate against you for it. EEA/UK users may withdraw consent at any time (without affecting prior processing) and lodge a complaint with their local supervisory authority. Because Lemon Squeezy controls your payment and order data, we may direct payment-related requests to it.

12. Children

The Software and Site are not directed to children under 16 (or the minimum age set by your local law), and we do not knowingly collect their data. If we learn we have collected a child's data, we will delete it.

13. Security

We use reasonable measures (Keychain storage for license keys, transport encryption). No method is perfectly secure, but the local-first design minimizes data at risk.

14. Changes

We may update this Policy; the version and date above reflect the current version. Material changes are posted on the Site. (Version 1.2 corrects the description of what the App reads — it never opens your files, but process command lines and, with your permission, on-screen text can contain prompts or code, matched locally and discarded — and names Typeform as a sub-processor.)

15. Contact

support@agentbarista.com · https://agentbarista.com · Omer Zada, Israel.