Privacy

13 Nov 2026

AgentDesign is a Mac app you buy once and run on your own computer. It has no account and no cloud, and it does not send us your designs. This page explains what little personal data exists around the app, the website and your purchase, and who holds it.

1. Who we are

AgentDesign is run by Hitesh Pankaj Nambiar, a sole trader (enskild näringsidkare) registered in Sweden. We are the data controller for the personal data this policy describes. If you have questions, write to hello@hiteshnambiar.com.

2. The app

What we collect from the app: nothing. The app has no account, no telemetry, no analytics and no crash reporting that reaches us.

Your designs (screens, flows, notes, images) are plain files in a folder on your Mac that you choose. They never leave your Mac through us.
The Obsidian mirror is optional. When you turn it on, the app copies files into an Obsidian vault on your Mac that you choose. Whatever Obsidian or Obsidian Sync then does with that vault is between you and Obsidian.
Licence activation: one call, once. When you enter your licence key, the app makes one request to Lemon Squeezy's licence service to activate the key on this Mac. It sends the key and a name for this Mac (an "instance name"). Like any web request, it also reveals your IP address to Lemon Squeezy. Nothing about your designs is sent. After activation, the app works offline for good: it never checks the key again and never contacts Lemon Squeezy or us.
Your licence key and the activation result are stored on your Mac.
Updates. The app does not check for updates. You download new versions from getagentdesign.com when you want them.

3. The website

getagentdesign.com is a static site. It sets no cookies, runs no analytics, has no forms and does no tracking.

The site is hosted on Cloudflare Pages. Like any web host, Cloudflare receives your IP address and basic request details (the page you asked for, your browser type, the time), for example when you visit or download the app. Cloudflare may log these to keep the site secure and stop abuse. We use Cloudflare as our service provider (a processor) for this. Our legal basis is our legitimate interest in running a secure website (GDPR Article 6(1)(f)).

4. Buying a licence

Purchases go through Lemon Squeezy, which acts as the merchant of record. That means:

You buy the licence from Lemon Squeezy, and your purchase contract is with Lemon Squeezy under its Buyer Terms. Lemon Squeezy charges your card, adds and pays the sales tax or VAT, issues your receipt or invoice, and handles refunds and chargebacks.
We never see your card details. Lemon Squeezy collects your payment information and handles it under its own privacy policy, as controller of that data.
Lemon Squeezy passes us the order details we need to sell and support your licence: your name, email address, country, what you bought, the price, the order number, the licence key and its activations. We use them to deliver and support your licence, answer your questions, handle refunds, and keep our accounts.

Our legal bases are performing our contract with you (Article 6(1)(b)) and our legal duty to keep bookkeeping records (Article 6(1)(c)). We keep order records for 7 years to meet Swedish bookkeeping rules, and then delete them.

We do not send newsletters or marketing email. We email you only when you write to us, or about your order.

5. Your AI agents and other third-party tools

AgentDesign runs a local server (MCP) so the AI agents you choose, such as Claude Code, Codex or Cursor, can read and write your designs. The server runs on your Mac and accepts connections only from that Mac.

Those agents are third-party tools under their own terms and privacy policies. When an agent reads a design, it may send that content to its AI provider (for example Anthropic or OpenAI) under the agreement between you and that provider. AgentDesign does not control, see or receive what an agent sends. Before you connect an agent to designs that are confidential, check its provider's terms.

The same applies to Obsidian and to any other tool you open your design files with.

6. Who we share data with

We do not sell or rent personal data, and we do not share it for advertising. The only parties who handle personal data in connection with AgentDesign are:

Lemon Squeezy: Merchant of record (controller for checkout and payment data). Sends us order details and runs the one-time licence activation. Handles purchase, payment, tax, licence keys and activations.
Cloudflare: Website host (our processor). Request logs for security.
Our email provider: Processor. Emails you send us and our replies.

We may also disclose data where the law requires it.

7. International transfers

Lemon Squeezy and Cloudflare are based in the United States and may process data there. Where personal data leaves the EU or EEA, the transfer relies on the safeguards those companies provide, such as the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

8. Your rights

If you are in the EU, EEA or UK (GDPR): you may ask us for access to your personal data, ask us to correct or delete it, object to or restrict our use of it, or ask for a copy in a portable format. Some of these rights have limits. For example, we must keep order records for bookkeeping. Write to hello@hiteshnambiar.com. We answer within one month. You may also complain to a data protection authority. In Sweden that is Integritetsskyddsmyndigheten (IMY), imy.se.

If you are in California (CCPA/CPRA) or another US state with a privacy law: we do not sell or share personal information as those laws define it, and we do not use it for targeted advertising. You may ask what personal information we hold about you and ask us to correct or delete it. We will not treat you differently for asking. Write to hello@hiteshnambiar.com.

For data that Lemon Squeezy holds as controller, such as payment details, ask Lemon Squeezy directly. We will help if you are not sure who holds what.

9. Children

AgentDesign is a tool for professionals. It is not aimed at children, and we do not knowingly collect personal data from anyone under 16.

10. Security

Since your designs stay on your Mac, protecting them is mostly in your hands: use FileVault, keep backups, and think about which folders your agents may reach. The app's local agent server only accepts connections from your own Mac, and the network (HTTP) connection requires a secret token that the app keeps in a file only your user account can read.

11. Changes to this policy

If we change this policy, we will publish the new version here and change the date at the top. If a change matters, for example the app starts sending something it does not send today, we will also say so in the release notes for that version.

12. Contact

Hitesh Pankaj Nambiar, a sole trader in Sweden. Email: hello@hiteshnambiar.com.

Lemon Squeezy is the merchant of record and shows its own details on every receipt.