Know what goes
into a decision.

Contact the operator

Agency Guardrail is operated under The Provider’s System. For help, billing questions, data exports or deletion requests, email support@agencyguardrail.com. Requests are reviewed by the operator.

Workspace and submission data

The application uses managed authentication and organization scoped database storage. Form submissions include the sender name, email, message, source, decision, review status and timestamps. Scope Guard stores client records, supplied agreement text, requests, assessments and reply drafts. Form Guard also stores protected site setup, destination addresses, delivery jobs, attempts, connection checks, health events, reviewer notes and classification feedback.

Form Guard connections and delivery

Observation copy keeps the website's existing email, CRM or storage delivery active. Form Guard records a server supplied copy and does not create a second lead email. Managed delivery sends a saved submission to active, verified email recipients or signed webhook endpoints. Resend processes built in email delivery. A webhook receiver receives the approved submission and a stable delivery identifier.

Source keys are stored only as hashes. Webflow signing material and outbound webhook signing credentials are encrypted. Verification tokens expire. Delivery retries retain a safe error summary and do not need a complete third party response body. Form attachments are not accepted.

Disabling a destination preserves its configuration so it can be restored. Removing a destination erases its saved address, endpoint, signing credential and verification material while preserving delivery history. Disconnecting a site invalidates its installation key, erases retained platform signing material and keeps pending delivery records recoverable.

Model processing

Form Guard sends the sender name, message and business context to an external AI decision service through Vercel AI Gateway. It does not explicitly include the sender email in its evaluation state, but any personal data written into the message itself can be sent. Scope Guard sends the client name, request and supplied agreement clauses for evaluation. Do not submit passwords, payment details or unnecessary sensitive data.

Billing

Stripe hosts subscription payments and billing management. Agency client invoicing is separate. A connected agency remains the merchant of record, receives direct charges in its Stripe account, and controls its payouts. The app stores the minimum account, customer, invoice, status, and event identifiers needed to operate the connection. It does not collect raw card details, bank details, identity documents, or Stripe passwords.

Change order approvals and attribution

A sent change order preserves an immutable copy of its scope, price, currency, terms, line items, agreement references, recipient, and version. Approval links expire and become unusable after a final decision. The reusable token is stored as a hash. The decision can include an optional comment and hashed network and browser evidence. Financial attribution is append only and keeps currencies separate. Refunds, credits, voids, and disputes remain traceable to their source event.

Connected Gmail accounts

Gmail access is read only. Google OAuth credentials are encrypted before storage and are available only to server processes. Agency Guardrail uses mailbox data to find messages tied to client contacts chosen in the workspace. The intended record is a derived request with limited evidence and source details, not a permanent copy of an entire mailbox. Gmail content is not used for advertising or to train general AI models.

Retention and review

The current implementation preserves submissions, including quarantine, until an authorized deletion process removes them. Automatic retention cleanup is not enabled. Quarantine is a review status, not deletion. A protected site can store a retention reference for planning, but that reference does not currently run automatic deletion. Workspace users can export filtered Form Guard submissions and client ready reports. Contact the operator for a complete export or deletion request before relying on a retention commitment.

Before using real client data

Confirm that your client’s privacy notice, provider agreements, retention requirements and access permissions cover this processing. The application does not claim regulatory certification or perfect classification accuracy.