Privacy Policy

1. Scope & Australian Privacy Act Compliance

Agent Frauds (agentfrauds.com) handles personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), alongside applicable international protections (GDPR, UK GDPR, and CCPA/CPRA). For any privacy question, access request, correction, or deletion request, email privacy@agentfrauds.com. Statutory entity and postal details are set out in Section 8 below.

2. Exact Personal Information We Collect

When you submit an email signup or contact form on agentfrauds.com, our Cloudflare Pages Function collects and stores only the following fields:

• Email address: validated and stored in lowercase so we can send you future updates from Agent Frauds once email dispatches begin.
• Site domain & form/page source: the domain name (agentfrauds.com) and the page path or form identifier where you signed up.
• Express consent record: the boolean value of the unticked consent checkbox, the exact consent wording shown, the consent text version identifier (2026-11-v2-cloudflare-d1), and the UTC timestamp of submission.
• Hashed IP address (rate limiting only): a one-way salted SHA-256 hash of your IP address used strictly to enforce per-IP rate limits and prevent automated abuse. We do not store your raw IP address in our subscriber database.
• Optional B2B contact fields (contact page only): if you use a business inquiry form, your name, organisation, short inquiry note, and (where applicable and separately ticked) optional partner-referral consent.
• What we never collect: we never request or accept payment card numbers, bank account / BSB / IBAN details, government ID or passport numbers, or passwords, and our forms actively block submissions matching those patterns.

3. Why We Collect It & Current No-Email Status

We process your email address (and optional B2B inquiry fields on contact forms) to record your opt-in for quarterly summaries of verified .gov AI enforcement releases and synthetic-identity compliance briefings. No automated emails are sent yet, and we do not accept unverified third-party accusations through any form.

No emails are sent yet: our system currently stores your email address and consent record only. No automated confirmation emails, autoresponders, or newsletter broadcasts are sent by the system at this stage. When updates from Agent Frauds begin, every commercial electronic message will include clear sender identification, postal contact details, and a functional one-step unsubscribe facility in accordance with the Australian Spam Act 2003 (Cth).

4. Where Your Data Is Stored (Cloudflare D1 Isolation & APP 8 Notice)

• Cloudflare D1 Database (agentfrauds-leads): form submissions are stored in a dedicated Cloudflare D1 serverless SQLite database scoped to agentfrauds.com, operated by Cloudflare, Inc. (United States and global edge network). Each website has its own isolated D1 database so subscriber lists are never commingled across domains.
• Cloudflare Turnstile & Web Analytics: Cloudflare Turnstile verifies form submissions server-side via Cloudflare's Siteverify API without ad-tracking cookies, and Cloudflare Web Analytics measures aggregate traffic without cookies or cross-site tracking.
• Overseas disclosure (APP 8): under Australian Privacy Principle 8, please note that Cloudflare, Inc. is headquartered in the United States and processes data across global infrastructure (including Australia and the United States). For EEA/UK visitors, transfers rely on Cloudflare's Data Processing Addendum and Standard Contractual Clauses (SCCs).
• Affiliate attribution (only when you click a labelled sponsored link): Selected compliance sections reference vetted B2B identity-verification software such as Persona KYB ([AFFILIATE_URL_PERSONA_KYB]). Every commercial referral link uses rel="sponsored nofollow" alongside the visible notice "Ad: we earn a commission if you buy through this link." Editorial selection of .gov enforcement actions is never influenced by commercial partnerships.

5. How Long We Keep Information (Retention)

• Email signup & inquiry records in Cloudflare D1: kept until you ask for deletion or unsubscribe, or deleted after 24 months of inactivity once email updates commence.
• Hashed-IP rate-limit counters: automatically purged from D1 after 24 hours; transient edge security logs expire within 30 days.

6. How to Request Access, Correction, or Deletion

Under Australian Privacy Principles 12 and 13 (and GDPR/CCPA where applicable), you can request a copy of the record we hold for your email address, ask us to correct it, or ask us to delete it permanently at any time by emailing privacy@agentfrauds.com from or referencing the email address you submitted. Deletions are executed directly against agentfrauds.com's Cloudflare D1 database within 30 days (and typically within 5 business days) at zero cost.

Privacy complaints & OAIC: if you believe we have breached the Australian Privacy Principles, email privacy@agentfrauds.com and we will respond in writing within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. Suspected eligible data breaches are assessed and notified in accordance with the Australian Notifiable Data Breaches (NDB) scheme.

7. GDPR, UK GDPR, California CCPA/CPRA & Transfer Notice

For EEA and UK visitors, our lawful basis for storing your email is your consent (Article 6(1)(a) GDPR), withdrawable at any time via privacy@agentfrauds.com, and our lawful basis for Turnstile verification and hashed-IP rate limiting is legitimate interests (Article 6(1)(f)). For California residents, we do not sell or share personal information under the CCPA/CPRA.

Because agentfrauds.com stores its subscriber list in an isolated per-site Cloudflare D1 database, if agentfrauds.com is ever sold or transferred as a standalone property, only records collected on agentfrauds.com may be transferred to the incoming owner, who will remain bound by this Privacy Policy for information collected under it. Subscribers will receive advance notice before any transfer so deletion can be requested first.

8. Statutory APP 1.4 Entity & Contact Record

agentfrauds.com is operated by Muse & Moonlight (museandmoonlight.com), ABN 18 656 044 027, postal address 66 Canning Highway, South Perth WA 6151, administrative contact admin@museandmoonlight.com. For fastest handling of site-specific access or deletion requests, contact privacy@agentfrauds.com.