Privacy Policy

Account data (name, email, organization), operational data (agents, policies, transactions, ledger entries, audit logs), and Commerce Profile data you explicitly create (buyer name, commerce email, phone, addresses, business identifiers). Technical logs include API request metadata and IP addresses for security.

Raw card numbers, CVVs, bank usernames or passwords, or provider login credentials. Payment credentials remain with regulated payment providers; we store only provider references and safe display metadata (for example, a card's last four digits). Commerce Profiles actively reject values that look like card numbers.

When your agents complete merchant checkouts, a deterministic release firewall controls exactly which profile fields can be disclosed, field by field, per purchase. Prohibited categories — credentials, card data, bank logins, government identifiers, secrets — are never releasable through commerce endpoints, regardless of what any merchant page or agent requests. Every release decision is logged without logging the values themselves.

To operate the platform, enforce your policies, prevent fraud, meet financial recordkeeping obligations, and improve the product. We do not sell personal data. Platform economics reporting uses aggregated, de-identified data.

You can view every notification and email we generate, export your transactions, archive Commerce Profiles, revoke agent credentials instantly, and request account deletion (subject to mandatory financial record retention).