Privacy Policy

NAME

Agent Watchdog privacy — what the Agent Watchdog extension for VS Code and the agentwatchdog.app website do with data.

SUMMARY

Agent Watchdog works on your machine. It does not send your source code to us, and no server of ours ever receives it. Fact checks and exact rules run locally. Plain-English rules, if you use them, send only the changed snippet and the matching rule to the AI provider you choose, never to us. The only network call we make is the licence check for paid plans, which sends your licence key and nothing else.

WHO WE ARE

Agent Watchdog is made by [legal entity name], [address] ("we", "us"). We are the controller for the personal data described below. Contact: [contact email].

THE EXTENSION

Your source code

Watchdog reads the code you change, your installed packages and their type definitions on your machine to check imports, calls and rules. That work happens locally and the results stay in VS Code.

Fact checks

To find out whether a package exists, Watchdog looks in node_modules (or your Python environment) and, if needed, asks the public package registry (npm or PyPI) about that package name. The request contains the package name only, no code, and goes to the registry, not to us; the registry's own privacy policy applies to it. No AI is used for fact checks.

Team rules and AI

Exact rules in .watchdog-rules are pattern checks that run locally, without AI. Plain-English rules (Pro) are judged by an AI model only after you consent: Copilot through VS Code's Language Model API, under your Copilot account, or your own API key, called directly from your machine and not through us. Each request contains only the changed snippet and the matching rule, never whole files, and at most 4 KB. The status bar shows which provider is called and how many bytes are sent, while it happens. The terms and privacy policy of the AI provider you choose apply to those requests.

MCP audit

Watchdog reads the MCP configuration files of your editors and AI clients to show which servers are configured and what they can reach. Because it flags tokens written in plain text, it reads those files in full, but the inventory lives in memory only: it is never written to disk, logged or sent anywhere.

Audit log

The audit log records file paths, line numbers, rule IDs, scores and the reasons you give for suppressing a flag. It never stores code. It stays on your machine; export to JSON or Markdown (Pro) happens only when you ask for it.

API keys

API keys you give Watchdog are stored only in VS Code's SecretStorage. They are never written to settings, workspace files or logs, and never sent to us.

Untrusted workspaces

In a workspace you haven't marked as trusted, Watchdog runs fact checks only: no rule evaluation and no MCP server execution.

Licence check

On a paid plan the extension checks your licence with our licence server. This is the only network call we make. It sends your licence key and nothing else; like any web request it also reveals your IP address to the server. The extension keeps working offline for 7 days between checks. The Free plan needs no account.

Telemetry

Telemetry is off by default. If you turn it on, Watchdog sends anonymous usage counts only, never code, file contents or prompts, to a server hosted in the EU. You can turn it off again at any time.

Logs

Watchdog writes what it does to its Output panel in VS Code, on your machine. Those logs never contain your code.

PAYMENTS

If you buy a plan, checkout, billing and VAT are handled by our payment provider, which processes your payment details, billing address and tax information under its own privacy policy. We don't see or store your full card details. We receive what we need to issue and manage your licence: [name, email address, plan, seats and subscription status — to be confirmed once the provider is chosen].

THIS WEBSITE

agentwatchdog.app is a static website. It sets no cookies and uses no analytics or tracking scripts; fonts are served from agentwatchdog.app itself. Our hosting provider processes standard request data such as IP address and browser type to deliver and protect the site. Links to the VS Code Marketplace and Open VSX take you to sites with their own privacy policies.

YOUR RIGHTS

Under the GDPR you can ask us for a copy of the personal data we hold about you, and ask us to correct or delete it, restrict or object to its use, or hand it over in a portable format. Write to [contact email]. You can also complain to your data protection authority.

RETENTION

[How long licence and billing records are kept — to be set; billing records are usually kept as long as tax law requires.]

CHANGES

If this policy changes, we'll update the date at the top of this page and describe material changes on agentwatchdog.app.