Privacy Policy

AgentYOUr is the data controller responsible for your personal data.

Contact: privacy@agentyour.ai

We are committed to handling your data responsibly and transparently regardless of where you are located.

Wallet data (essential): Your public blockchain wallet address when you connect your wallet. This is public information permanently recorded on the blockchain.

Registration data (sellers only): First name, last name, email address, Telegram handle, and background information provided during seller verification.

Transaction data: Purchase records, listing data, and access tokens. Blockchain transactions are permanent and public.

Technical data: IP address, browser type, device type, operating system, pages visited, and timestamps — collected via server logs.

Cookie data: As described in our Cookie Policy. Analytics and marketing cookies only with your explicit consent.

Communications: Any messages you send to our support team.

EU/UK users (GDPR / UK GDPR):
— Contract performance (Art. 6(1)(b)): providing the Service
— Legitimate interests (Art. 6(1)(f)): fraud prevention, platform security
— Consent (Art. 6(1)(a)): analytics and marketing cookies
— Legal obligation (Art. 6(1)(c)): regulatory compliance

California users (CCPA/CPRA):
We do not sell your personal information. You have the right to know, delete, correct, and opt out of sharing. See Section 8 for how to exercise these rights.

All other users:
We process data based on your consent, contractual necessity, and our legitimate business interests in operating a safe and functional marketplace.

Transactions on Base, Ethereum, and TRON blockchains are permanently recorded on public ledgers and cannot be altered or deleted. This is an inherent characteristic of blockchain technology.

This means:
— Your wallet address and transaction amounts are permanently visible on-chain to anyone
— We cannot fulfil erasure requests for data that exists only on the blockchain
— We CAN delete off-chain data: your name, email, Telegram handle, and any data in our database

By using the Service you acknowledge and accept this permanent on-chain data storage. This disclosure is made in compliance with GDPR Art. 13, CCPA, and equivalent laws.

We use your personal data to:
— Provide, operate, and improve the marketplace
— Verify seller identities and moderate listings
— Process transactions and deliver purchased assets
— Send transactional notifications (purchase confirmations, listing approvals)
— Detect and prevent fraud, abuse, and illegal activity
— Comply with legal and regulatory obligations
— Respond to law enforcement requests where required
— With your consent: analytics and marketing communications

We do not sell your personal data to any third party.

Blockchain networks: Transaction data is broadcast to public blockchains (Base, Ethereum, TRON) and is permanently public.

IPFS / Pinata: Asset files are stored on the InterPlanetary File System and are content-addressed and publicly accessible by hash.

Infrastructure providers: Hosting, CDN, database, and email providers, each bound by data processing agreements.

Law enforcement: When required by law, court order, or to protect the safety of our users.

Business transfers: In the event of a merger or acquisition, your data may be transferred with appropriate notice.

All third-party providers are contractually required to protect your data and use it only as directed.

AgentYOUr serves users globally. Your data may be processed in countries outside your own, including countries that may have different data protection laws.

For EU/UK users: We use Standard Contractual Clauses (SCCs) approved by the European Commission for transfers outside the EEA.

For all users: We implement appropriate technical and organisational security measures regardless of where data is processed, including encryption in transit and at rest, access controls, and regular security reviews.

Depending on your location, you may have the following rights:

EU/UK (GDPR/UK GDPR):
— Access (Art. 15): request a copy of your data
— Rectification (Art. 16): correct inaccurate data
— Erasure (Art. 17): delete your off-chain data
— Restrict processing (Art. 18)
— Data portability (Art. 20)
— Object to processing (Art. 21)
— Lodge a complaint with your supervisory authority

California (CCPA/CPRA):
— Know what personal information we collect and how it is used
— Delete your personal information
— Correct inaccurate personal information
— Opt out of sale or sharing (we do not sell data)
— Non-discrimination for exercising rights

Brazil (LGPD), Canada (PIPEDA), and others:
Equivalent rights apply. Contact us at privacy@agentyour.ai.

All users: To exercise any right, email privacy@agentyour.ai. We will respond within 30 days (or sooner as required by law). We may need to verify your identity before processing requests.

Essential cookies: Required for the site to function (wallet connection, session). No consent required.

Analytics cookies: Understand how the site is used. Only with your explicit consent.

Marketing cookies: Personalised content. Only with your explicit consent.

You can manage preferences via the cookie banner at any time. For users in jurisdictions without cookie consent requirements, we still honour opt-out requests.

We do not use cookies to track you across third-party websites.

— Seller registration data: retained for the duration of your account plus 3 years for legal compliance
— Transaction records (off-chain): retained for 7 years for financial and tax compliance
— Technical/log data: retained for 90 days
— Support communications: retained for 2 years
— Deleted accounts: off-chain data purged within 30 days of a verified erasure request
— On-chain data: retained permanently (blockchain records cannot be deleted)

Retention periods may be extended where required by applicable law.

The Service is strictly for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has registered or provided data, contact us immediately at privacy@agentyour.ai and we will delete all off-chain data promptly.

This applies globally. In jurisdictions with higher age thresholds, the higher threshold applies.

We implement industry-standard security measures including:
— TLS/SSL encryption for all data in transit
— Encryption of sensitive data at rest
— Access controls and least-privilege principles
— Regular security reviews
— Incident response procedures

However, no system is 100% secure. In the event of a data breach affecting your rights, we will notify you and relevant authorities as required by applicable law.

We may update this Privacy Policy at any time. Material changes will be communicated via email (if registered) or a prominent site notice at least 30 days before taking effect. We will update the "Last updated" date at the top.

Continued use after the effective date of changes constitutes acceptance.

For all privacy queries and data subject requests:
Email: privacy@agentyour.ai
Response time: within 30 days

EU/UK users may also lodge a complaint with their national data protection authority (e.g. ICO in the UK, CNIL in France, BfDI in Germany).

California users may contact the California Privacy Protection Agency.

We take all complaints seriously and will work to resolve them promptly.