diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 52bfa88..665e560 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -8,5 +8,7 @@
   "repository": "https://github.com/haoranc/agent-estimate",
   "homepage": "https://github.com/haoranc/agent-estimate",
   "license": "Apache-2.0",
-  "keywords": ["ai", "agents", "estimation", "pert", "planning", "wave-planning", "metr"]
+  "keywords": ["ai", "agents", "estimation", "pert", "planning", "wave-planning", "metr"],
+  "privacyPolicy": "https://github.com/haoranc/agent-estimate/blob/main/PRIVACY.md",
+  "support": "https://github.com/haoranc/agent-estimate/issues"
 }
diff --git a/PRIVACY.md b/PRIVACY.md
new file mode 100644
index 0000000..71fcd2f
--- /dev/null
+++ b/PRIVACY.md
@@ -0,0 +1,23 @@
+# Privacy Policy
+
+**agent-estimate** is an open-source CLI tool that runs entirely on your local machine.
+
+## Data Collection
+
+This plugin does **not** collect, store, or transmit any personal data, telemetry, or usage analytics.
+
+## Local Operation
+
+All estimation calculations, calibration data, and wave planning run locally. No data is sent to external servers by this tool.
+
+## Optional GitHub Integration
+
+When using the `--issues` flag, the tool makes read-only requests to the GitHub API to fetch issue metadata. These requests go directly from your machine to GitHub using your locally configured credentials (`gh` CLI). No data is proxied through any intermediary.
+
+## Third-Party Services
+
+This plugin does not integrate with any third-party analytics, advertising, or tracking services.
+
+## Contact
+
+For questions about this policy, open an issue at <https://github.com/haoranc/agent-estimate/issues>.