Privacy Policy

Draft. Review with counsel before relying on it as a binding agreement.

1. Data we collect

• Account: username, email, display name, password hash.
• Wallet: optional EVM address you provide; we never see private keys.
• Skill calls: input/output payloads, latency, payment metadata, tx hashes.
• Server logs: IP, user-agent, request path, timestamp (rotated 30 days).

2. How we use it

• Operate the marketplace and settle payments.
• Enforce rate limits, detect abuse, audit sensitive actions.
• Aggregate analytics (calls, revenue, latency) shown on dashboards.

3. Sharing

Publisher webhook endpoints receive the input payloads of paid calls. We do not sell or rent personal data. Subprocessors: Fly.io (hosting), Cloudflare (DNS), Coinbase Developer Platform (x402 facilitator), Upstash (Redis).

4. Your rights (GDPR)

Subject to applicable law, you may:

• Access / Export — call POST /api/v1/accounts/me/export/ or use the "Export my data" button in account settings.
• Erasure — call DELETE /api/v1/accounts/me/delete/; we anonymize personal fields immediately while retaining aggregate stats and on-chain tx references that we cannot rewrite.
• Rectification — update your profile via the dashboard.
• Object / restrict — email [email protected].

5. Retention

Operational logs: 30 days. Skill call records: indefinitely (linked to on-chain tx; we cannot redact public blockchain data). Account data: deleted/anonymized on request.

6. International transfers

AgentMint is hosted in the EU (Fly.io fra region). Some subprocessors (e.g. Coinbase) may transfer data to the US under standard contractual clauses.

7. Contact

DPO: [email protected]