What we store when you create an account, and why.

What we store

When you create an account we keep your email address, your first name, and a scrypt hash of your password. That hash is a one-way scramble — we cannot read your password back, and neither can anyone who obtains the database.

We also keep a counter of how many guides you have downloaded and which one most recently, so we can tell which guides are useful. There is no other record.

What we do not store

• No phone number. There is no reason for one.
• No marketing consent flag. Downloading a guide is not permission to email you, and we do not treat it as such. We will not add you to a marketing list because you made an account here.
• No tracking cookies. The only cookie is the session cookie that keeps you signed in. There is no analytics script, no advertising pixel, and no third-party tracker on this site.

Who can see it

Your details go into an Airtable base that only the Agentcy team has access to. We do not sell, rent or share it. We will not pass it to a marketing platform.

How long we keep it

Until you delete it. There is no expiry schedule and no dormant-account cleanup, because we would rather you deleted it than have it quietly expire while you still expect your downloads to work.

Your rights

Under POPIA you can ask us to correct your details, to object to how we used them, and to have them destroyed. You can also do the last one yourself, without waiting on us:

• Sign in to any guide.
• Use the “Delete my account” control at the bottom of the page.

That deletes your record and the password hash immediately. It does not un-send anything already sent to you.

If you would rather email, write to ai@agentcy.co.za.

What we measure, and what we deliberately do not

This site uses Google Analytics to answer two questions: are these guides being read, and is the cost calculator leading anyone to a conversation. A small number of anonymous events are sent to Google as a result.

What those events contain:

• That you opened a page, which page, and roughly where you came from.
• On the cost calculator, that you started filling it in and how many of the four blocks you completed.
• On a guide, that you created an account or signed in, and that you downloaded the .skills bundle.

What they never contain: any figure you type into the calculator, any revenue or customer count, your name, or your email address. The calculator's arithmetic happens entirely in your browser and no field value is ever transmitted. Analytics is configured with IP anonymisation, and we do not build advertising or remarketing audiences from it.

If you would rather send nothing at all, blocking googletagmanager.com works. Nothing on this site depends on the analytics script loading — accounts and downloads behave identically without it.

About the sign-in cookie

Signing in sets a single cookie, ag_session, which holds a signed reference to your account and expires after 30 days. It is marked HttpOnly, Secure and SameSite=Lax, so scripts cannot read it and it is not sent to other sites. Signing out clears it.

One honest limitation: because that reference is signed rather than looked up in a session table, a cookie copied out of a browser stays valid until it expires. We have deliberately kept it to one capability — “this email has an account” — and there is no password, key or personal data inside it.

Licence for the guides

The written guides and the downloadable toolkits are licensed CC BY-NC-SA 4.0. Use them commercially in your own business, share them, and adapt them. Credit Agentcy. Do not resell them or claim them as your own work.