Privacy

The "I run a site with forms" form

We store what you send: your site's address, your email address and your note, with the time and whether a person or an agent sent it. We use it only to reply to you about Usher. It is kept until you ask us to delete it, and only the people who run Usher can read it.

The site script on websites that use Usher

The script never reads or sends what anyone types, and it never tracks people. It sets no cookies.

• For everyone: it fetches the map for the page it is on, sending only the page's address. If the form no longer matches its map, it reports the form's structure (its fields and buttons, never their contents) so the map can be rebuilt.
• In your browser: it keeps two small notes in local storage: which map it last fetched for a page, and that a changed form was already reported. Neither says anything about you.
• Only when an AI agent has knocked and been let in does it log what the agent did, by meaning ("filled the email field", "pressed submit"), never with the values.

Agent sessions

When an agent knocks, we record which agent it was (the public key it identified itself with), the site, what it came to do, and the actions logged above. The site's owner can read their own sites' sessions in their dashboard. Sessions are deleted after 90 days, or sooner if the site's owner sets a shorter time.

Maps

Maps describe the structure of public forms: labels, field types and buttons. They never hold values. When a map is built, the page's structure and a screenshot of it are sent to the AI models that label it (Muse Spark from Meta, and Muse Spark Open through Baseten).

Cookies and addresses

The only cookies are the ones that keep a site owner or an administrator signed in. They are strictly necessary, so there is no cookie banner. Your IP address is used in memory to limit how often one address can call us, and it is never stored.

Where it runs

Usher runs on Amazon Web Services in London (eu-west-2). The code is open: https://github.com/rhys-looma/Usher.