Legal
Privacy policy
This describes what we collect, why we hold it, and exactly who else touches it. It lists every third party by name rather than referring vaguely to "service providers".
Who is responsible
- Legal entity
- Murasaki Italia K.K. (株式会社)
- Representative
- Matteo Sanzone
- Registered address
- Level 18, Yebisu Garden Place Tower, 4-20-3 Ebisu, Shibuya-ku, Tokyo 150-6018, Japan
- Contact
- matt@murasaki.ai
- Service
- AgencyAegis, at agencyaegis.com and app.agencyaegis.com
What we collect
From you
- Your email address, used to sign you in and to send alerts.
- Your time zone, so the daily digest arrives in your morning rather than ours.
- The links you ask us to watch: the page the link sits on, the page it should point to, and optionally the supplier, the price you paid and the delivery date, if you choose to record them.
- Project names and the domains they cover.
Generated by the service
- Check results: whether the link was found, its anchor text, its
relattributes, where on the page it sits, and the HTTP status of the page. - Evidence: a screenshot of the page, a snapshot of its HTML, an excerpt of the markup around the link, and a SHA-256 hash of the snapshot so it can be shown to be unaltered.
- Search index responses from third party providers about whether a page is indexed.
- Delivery records for the emails we send you, including bounces and spam complaints.
What we deliberately do not collect
- No passwords. Sign in is an emailed link, so there is nothing to store.
- No card details. Stripe handles payment. We hold a customer reference and your plan, never a card number.
- No advertising or analytics trackers on the application. No third party advertising cookies anywhere.
Why we hold it
To run the checks you asked for, to alert you when something changes, to keep the evidence that supports each conclusion, to bill you, and to answer you when you get in touch. We do not sell it, and we do not use it to train anything.
Where it lives
The database and the stored evidence are in Tokyo, Japan (ap-northeast-1). The checking engine runs in Tokyo (nrt). Some processors below operate globally and may process data outside Japan.
Everyone who processes it
- Supabase
- Database and evidence storage, Tokyo region
- Fly.io
- Runs the checking engine, Tokyo region
- Cloudflare
- Serves the site and the application, DNS
- Stripe
- Payments and subscriptions. Holds card details; we do not
- Resend
- Sends sign in links and alert emails, delivered via Amazon SES
- DataForSEO
- Search index checks
- IndexChex
- Search index checks
- SpeedyIndex
- Search index checks
Each receives only what it needs. The index providers receive a page URL and nothing about you. Resend receives your email address and the message. Stripe receives what a payment requires.
How long we keep it
- Account and link data: while your account is open, then deleted within 30 days of closure.
- Evidence records: retained so an older change can still be evidenced, and removed with the link or the account.
- Billing records: kept as long as Japanese tax law requires, which is longer than the rest and applies even after closure.
- Suppression records for addresses that hard bounced or reported us as spam: kept indefinitely, because forgetting them means mailing a dead address forever.
Cookies
The application sets one cookie, holding your sign in session. It is strictly necessary, so it is set without a consent banner. There are no analytics or advertising cookies.
Your rights
You can ask for a copy of your data, correct it, export it, or have it deleted. Email matt@murasaki.ai and we will act within 30 days. Deletion is real deletion rather than a flag, with the exception of the billing and suppression records described above.
Security
Data is encrypted in transit and at rest by the providers above. Access between accounts is separated at the database level, so one customer's query cannot reach another's rows. Evidence storage is private and is not publicly listable.
Children
The service is for business use and is not directed at anyone under 18.
Changes
If this policy changes materially we will email account holders before it takes effect.
Contact
Any privacy question, including a complaint, goes to matt@murasaki.ai.