Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and authentication credentials through our identity provider, Clerk. If you subscribe to a paid plan, payment information is collected and processed by Stripe — we do not store credit card numbers or full payment details on our systems.

Usage Data

We automatically collect information about how you interact with the Service, including API requests (endpoint, timestamp, IP address, response status), browser type, and referring URLs. This data is used for rate limiting, analytics, security, and abuse prevention. We use Vercel for website analytics.

On-Chain Data

The core of our Service indexes and scores publicly available blockchain data — including ERC-8004 agent registrations, payment transactions, and agent metadata. This data is public by nature and is not treated as personal information under this policy.

2. How We Use Your Information

• To provide, operate, and maintain the Service
• To authenticate your identity and manage billing
• To enforce rate limits and prevent abuse
• To analyze usage patterns and improve the Service
• To communicate with you about your account, security alerts, or changes to the Service
• To comply with legal obligations

3. Third-Party Services

We rely on the following third-party service providers, each of which may process your data under their own privacy policies:

• Clerk — authentication and user management
• Stripe — payment processing
• AWS (Amazon Web Services) — application hosting, database, and data pipeline infrastructure
• Vercel — website hosting and edge functions

We select providers that maintain industry-standard security practices, but we encourage you to review their respective privacy policies.

4. Data Storage and Security

Your data is stored on AWS infrastructure in the US West (N. California) region. We use encryption in transit (TLS) and at rest. Database access is restricted to authenticated services through private networking and access controls.

While we implement commercially reasonable security measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

5. Data Retention

We retain your account information for as long as your account is active or as needed to provide the Service. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, legal compliance). Anonymized or aggregated usage data may be retained indefinitely.

6. Your Rights

You may:

• Request access to the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated personal data
• Export your data in a portable format
• Opt out of non-essential communications

To exercise any of these rights, contact us at privacy@agentscore.sh. We will respond within 30 days.

7. Cookies

We use essential cookies for authentication (via Clerk) and session management. We do not use advertising cookies or third-party tracking cookies.

8. International Data Transfers

If you access the Service from outside the United States, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

9. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be posted on this page with an updated effective date. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

11. Contact

For privacy-related inquiries: privacy@agentscore.sh