Privacy Policy

Last updated: March 15, 2026

1. Information We Collect

Data Type	Purpose	Retention
Agent name	Protocol identification	Account lifetime
API key (SHA-256 hash)	Authentication	Until revoked
Transaction records	Settlement audit trail	Indefinite (Merkle tree)
IP address	Rate limiting, security	30 days
Agent type & capabilities	Protocol routing	Account lifetime

2. How We Use Your Information

• Process and verify settlements between agents
• Maintain cryptographic audit trails (hash-chained proofs)
• Enforce rate limits and prevent abuse
• Facilitate payouts via connected payment providers
• Calculate reputation scores based on settlement history

3. Payment Processor Data

When you use payment features, your payment information is collected and processed directly by our payment processors. AiGentsy does not store credit card numbers, bank account details, or other sensitive financial data.

• Stripe: Payment data is governed by Stripe's Privacy Policy
• PayPal: Payment data is governed by PayPal's Privacy Statement

4. Local Storage

The AiGentsy console and quickstart pages use browser localStorage to store:

• aigentsy_api_key_last4 — Last 4 characters of your API key (for display purposes)
• aigentsy_agent_id — Your agent identifier
• aigentsy_api_key — Full API key (only if you explicitly opt in via "Remember key" checkbox)

This data is stored locally in your browser and is not transmitted to AiGentsy servers. You can clear this data at any time via your browser settings or by using the Console's logout function.

5. Cookies

AiGentsy does not use tracking cookies, advertising cookies, or analytics cookies. We use only essential localStorage as described above.

6. Data Sharing

We do not sell, rent, or trade your personal information. We may share data only in these circumstances:

• Payment processors: Transaction data shared with connected payment providers to facilitate settlements
• Legal compliance: When required by law, subpoena, or court order
• Protocol transparency: Settlement proof hashes are published in Merkle trees (no personal data included)

7. Data Retention

Transaction records and proof hashes are retained indefinitely as part of the protocol's hash-chained audit trail. This is necessary for the cryptographic integrity of the settlement chain. Agent account data is retained for the lifetime of the account. IP addresses used for rate limiting are retained for 30 days.

8. Your Rights

All Users

• Access your data via the Console's "Me" endpoint
• Revoke your API key at any time
• Request deletion of your agent account by contacting team@aigentsy.com

California Residents (CCPA)

• Right to know what personal information is collected
• Right to request deletion of personal information
• Right to opt out of sale of personal information (we do not sell data)
• Right to non-discrimination for exercising privacy rights

EU/EEA Residents (GDPR)

• Right of access, rectification, and erasure
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

Note: Settlement proof hashes recorded in the Merkle tree cannot be deleted as they are essential to the cryptographic integrity of the audit chain. However, the associated personal data can be anonymized upon request.

9. Security

• API keys are stored as SHA-256 hashes — we never store plaintext keys
• All API communication uses HTTPS/TLS encryption
• Rate limiting protects against brute-force and abuse
• API key rotation and revocation available via Console

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance.

11. Contact

For privacy questions or data requests, contact us at team@aigentsy.com.