1. Introduction
This Data Processing Agreement ("DPA") forms part of the Terms of Service between Agent Logger ("Processor") and you ("Controller") for the use of Agent Logger.
This DPA is designed for enterprise users who require GDPR compliance documentation.
2. Definitions
- "Personal Data" means any information relating to an identified or identifiable natural person.
- "Processing" means any operation performed on Personal Data.
- "Controller" means the entity that determines the purposes and means of Processing.
- "Processor" means the entity that Processes Personal Data on behalf of the Controller.
- "Data Subject" means an identified or identifiable natural person.
3. Subject Matter and Duration
Processing Purpose: Browser automation for AI-assisted software development.
Duration: For the term of your use of Agent Logger.
4. Nature of Processing
Important: Agent Logger processes all data locally on your machine.
No Personal Data is transmitted to Agent Logger or any external servers. This significantly reduces GDPR compliance requirements.
| Data Category | Processing Activity | Storage Location |
|---|---|---|
| Screenshots | Capture and temporary storage | Local /tmp directory |
| DOM Element Information | Inspection and analysis | Memory only |
| Console Error Logs | Capture and filtering | Memory only |
| Page Metadata (URL, title) | Context gathering | Memory only |
5. Data Subject Categories
- Enterprise developers using Agent Logger
- End users whose web pages are inspected (indirectly, via screenshots)
6. Controller Obligations
As the Controller, you are responsible for:
- Ensuring a lawful basis for data collection and processing
- Informing data subjects about the processing where required
- Responding to data subject access requests
- Ensuring compliance with applicable data protection laws
- Implementing appropriate security measures on your systems
7. Processor Obligations
As the Processor (via the Extension), Agent Logger:
- Processes data only according to your instructions (you control when to capture/send data)
- Ensures personnel confidentiality through open-source transparency
- Implements security measures (see Section 9)
- Assists with data subject requests where applicable
- Deletes data after processing (automatic cleanup)
- Makes information available for audits (open-source codebase)
8. Sub-processors
Agent Logger does NOT use sub-processors.
All data processing occurs locally on your machine. No data is sent to third-party services by the extension itself.
Note: When you send data to AI assistants (Claude Code, Gemini CLI, etc.), those services become separate controllers/processors. Please review their respective DPAs.
9. Security Measures
Technical Measures:
- Native messaging architecture with no network exposure
- Extension ID allowlist for authentication
- Local-only data storage
- Automatic data deletion (24 hours for screenshots)
- Sensitive data (passwords) redaction in screenshots
- Process isolation between components
- Origin verification for all communications
Organizational Measures:
- Transparent security practices
- Documented data flows in architecture documentation
- Regular security reviews
10. Data Breach Notification
Since Agent Logger processes data locally and does not transmit data to external servers, data breaches related to the extension would occur on your local systems.
If a security vulnerability is discovered in Agent Logger:
- We will notify users via official communication channels
- We will release a patched version as soon as possible
- We will provide guidance on mitigation steps
11. International Data Transfers
Agent Logger does not transfer data internationally. All processing occurs on your local machine in your jurisdiction.
12. Audit Rights
Regarding audit capabilities:
- All data flows are documented in the architecture documentation
- Security practices are transparent and documented
- Contact us for security audit inquiries
13. Termination
Upon termination of your use of Agent Logger:
- Uninstall the extension from your browser
- Delete any local data by clearing the /tmp/agent-logger-data directory
- Remove the MCP server configuration from your AI assistant
- Data is automatically cleaned up within 24 hours