Privacy notice

Operator and scope

The operator identified above is responsible for this notice, which covers agents-trust.com and api.agents-trust.com. Contact us to ask about your personal data or exercise your rights. A provider you choose to call, your wallet and your agent host have their own data handling.

What we process and why

We process task phrases, inspected endpoint URLs and request options to provide the service. Operational records include user agent, path, timestamps, request and payment-attempt identifiers, response status and timing. Payment records can include wallet addresses, transaction hashes and payment-attempt IDs. Public blockchain transactions are independently visible and are not erasable by us.

We use the relevant information to operate, secure, bill and measure the service, reconcile payments, diagnose incidents and handle support. Where the GDPR applies, the bases include performing the requested service, our legitimate interests in reliable operation and abuse prevention, and applicable legal obligations. We do not sell personal data. Do not send wallet keys, seed phrases or confidential personal material in task text or support requests.

IP addresses

We process your IP address to deliver and protect the service. Cloudflare processes it as our provider and uses IP-based rate-limit counters with 60-second windows. That window describes our request limiter, not the retention of Cloudflare's other platform records.

For new application request records, we use the raw connection IP to deliver and protect the service, including rate limiting, and compute a keyed hash at the edge before storage. Our application logs store the IP address and a keyed hash of it; we retain those request records for 400 days. Cloudflare processes the raw IP as our provider. Existing records are not all hash-only: older operational request records can retain raw IP addresses for up to 30 days, and an existing restricted IP lookup store has a six-month expiry. Existing keyed IP hashes in request records have a 400-day expiry. A keyed hash is pseudonymous personal data, not anonymous data. Source logs and diagnostic exports can also contain historical IP addresses; the separate retention paragraph below applies to those copies.

Providers and analytics

Cloudflare supplies website and API delivery, security and cookieless Web Analytics. We do not use tracking cookies for analytics. Cloudflare processes connection information on its infrastructure under its provider terms. AWS supplies operational storage and processing; the verified source-log storage location is Frankfurt, Germany (eu-central-1). Cloudflare uses a distributed network rather than one fixed service region.

Necessary payment information is processed by the payment facilitator and public blockchain selected in your payment terms. International processing is subject to the relevant provider arrangements and applicable data-protection requirements; contact us for information about recipients and applicable safeguards.

Retention

The configured expiries are 30 days for raw IP in older request records, six months for the restricted IP lookup store, and 400 days for request records including keyed IP hashes, operational payment-attempt records and retained usage aggregates. Expiry is implemented through background storage cleanup and is not an instant deletion guarantee. Public blockchain history remains independently available.

The verified source-log storage has no automatic expiration rule for request logs. Historical source logs, diagnostic exports and support correspondence are retained until no longer needed for operation, incident investigation, resolving support or applicable legal duties; these classes do not have a fixed application deletion period stated here. Contact us about the data retained for your request and any deletion or restriction request. Cloudflare's separate platform-log retention follows its service settings and terms; it is not governed by our 60-second rate-limit window.

Your rights

Under Swiss data-protection law and the GDPR where applicable, you may request information about and access to your personal data, correction, deletion or restriction, object to processing, request portability where applicable, and withdraw consent where processing depends on it. These rights are subject to applicable exceptions and necessary recordkeeping. We may need proportionate information to verify your request.

Write to hello@agents-trust.com. You may also contact the Swiss Federal Data Protection and Information Commissioner or the competent data-protection authority where applicable. We will communicate material updates to this notice and its effective date through the service.