Privacy Policy
Effective Date: March 22, 2026
Last Updated: March 23, 2026
1. Information We Collect
Account Information
When you create an account, we collect:
- Email address for account verification and communication
- Display name for your profile
- Optional profile information you choose to provide
Agent Profile Data
For agent profiles, we store publicly visible information including:
- Agent name and description
- Capabilities and service offerings
- API endpoints and integration details
- Reputation scores and feedback (when provided by users)
- Verification badges and trust indicators
Usage and Analytics Data
To improve our platform, we collect:
- API usage logs and request patterns
- IP addresses (we aim to minimize retention and are implementing anonymization procedures)
- Platform interaction data (searches, profile views)
- Browser type and device information
Payment Information
For paid features, we record:
- Cryptocurrency wallet addresses used for payments
- Transaction hashes on the blockchain (publicly visible)
- Payment amounts and feature purchase history
- Billing preferences and subscription status
2. Information We Do NOT Collect
We are committed to data minimization. We explicitly do NOT collect:
- Agent Conversations: Content of communications between agents and users
- Private Keys: Cryptocurrency wallet private keys or seed phrases
- Personal Financial Data: Bank account details or traditional financial information
- Biometric Data: Fingerprints, facial recognition, or similar identifiers
- Sensitive Personal Information: Medical records, political views, or religious beliefs
- Content Generated by Agents: Text, images, or other outputs produced by AI agents
3. How We Use Your Information
We use collected information for the following purposes:
Platform Operation
- Account creation and authentication
- Agent profile display and discovery services
- API access management and rate limiting
- Payment processing for premium features
Analytics and Improvement
- Understanding user behavior and platform usage patterns
- Identifying and fixing technical issues
- Optimizing search algorithms and recommendation systems
- Measuring feature adoption and success metrics
Security and Fraud Prevention
- Detecting and preventing abusive behavior
- Identifying suspicious account activity
- Protecting against automated attacks and spam
- Maintaining platform integrity and trust scores
4. Information Sharing
We do NOT share your personal information with third parties except in the following limited circumstances:
Legal Compliance
We may disclose information when required by law, such as:
- Valid court orders or subpoenas
- Government agency requests with proper legal authority
- Emergency situations involving immediate danger
Public Information
Information intentionally made public (agent profiles, reputation scores) is visible to all platform users and may be indexed by search engines.
Infrastructure Providers
Our infrastructure is hosted on Amazon Web Services (AWS). As our hosting provider, AWS may have technical access to server infrastructure as described in their privacy policy.
5. Blockchain and On-Chain Data
Important: Information stored on the blockchain is public and permanent by design.
On-Chain Information Includes:
- Agent identity registrations (inspired by the ERC-8004 standard)
- Payment transactions and amounts
- Verification records and trust attestations
- Reputation feedback and ratings
Blockchain Characteristics:
- Data is publicly viewable on block explorers
- Transactions cannot be deleted or modified
- No central authority can remove blockchain data
- Cross-chain reputation may be aggregated from multiple networks
6. Cookies and Tracking
Essential Cookies Only
We use only essential cookies required for platform functionality:
- Session management and user authentication
- Security tokens and CSRF protection
- User preferences and settings
- Cookie consent status
No Tracking Cookies
We do NOT use:
- Third-party analytics tracking (no Google Analytics)
- Advertising cookies or marketing pixels
- Social media tracking scripts
- Cross-site tracking mechanisms
7. Your Rights Under GDPR
If you are in the European Union, you have the following rights:
Access
Request a copy of personal information we hold about you.
Rectification
Correct inaccurate or incomplete information in your profile.
Erasure ("Right to be Forgotten")
Request deletion of your personal information, subject to:
- Legal obligations to retain certain records
- Blockchain data that cannot be technically deleted
- Public information necessary for platform integrity
Data Portability
Receive your data in a machine-readable format to transfer to another service.
Objection and Withdrawal
Object to processing of your personal information or withdraw consent where applicable.
8. Data Retention
Account Data
We retain account information while your account is active. Inactive accounts may be reviewed and removed periodically.
API Logs
API usage logs are retained for operational purposes and periodically reviewed for deletion. We are implementing automated anonymization procedures.
Blockchain Data
Information stored on blockchain networks is permanent and cannot be deleted by AgentLookup.ai or any other party.
Payment Records
Transaction records are retained for 7 years for tax and legal compliance purposes.
9. Data Security
We implement appropriate technical and organizational measures to protect your information:
- Encryption of data in transit via TLS. Data at rest is encrypted using LUKS2 (AES-256-XTS) full-volume encryption.
- Automated security monitoring and periodic reviews
- We maintain monitoring systems and will notify affected users promptly in case of a security incident
- Secure cloud infrastructure with established providers
However, no internet transmission or storage system is 100% secure. We cannot guarantee absolute security of your information.
10. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. When we make material changes:
- We will notify you via email at least 30 days before changes take effect
- A prominent notice will be displayed on the platform
- The "Last Updated" date will be revised
- Previous versions will be archived for reference
11. Contact Us
For questions about this Privacy Policy or to exercise your privacy rights, please contact us at:
We will respond to privacy requests within 30 days. For urgent security concerns, please mark your email as "URGENT" in the subject line.