Privacy Policy

Agentcard Corporation (“Company,” “we,” “us,” or “our”) operates agentcard.sh (the “Site”) and related services. This Privacy Policy describes how we collect, use, disclose, and protect your information when you use the Site and our services.

Information We Collect

Information you provide

• Account information: name, email address, and phone number when you create an account. You sign in with a one-time code sent to your email or phone; we do not use passwords.
• Payment information: wallet funding details processed through our payment providers, including Crossmint (Apple Pay / Google Pay / card), stablecoin deposit providers, and Coinbase in certain legacy flows; funds are converted to USDC and held as collateral for your cards. Organization subscriptions and certain legacy flows are processed through Stripe.
• Card usage data: card names, labels, funding amounts, and transaction history associated with your virtual cards
• Cards you save in the Vault: your browser encrypts the card under a key we never hold. We keep the encrypted card, its last four digits, brand, expiry date, and the label you give it.
• Orders and delivery addresses: what you ask your agent to buy, your carts and orders, and the delivery addresses and contact details you give for them
• Store accounts: when you link a store account, or when we create one for you to complete an order, we keep its sign-in details and session, encrypted, so your agent can order for you
• Support communications: messages you send through our support chat or email

Slack integration data

If you install our Slack app or link your Slack account, we collect and store the following:

• Workspace information: Slack workspace (team) ID and team name
• Bot token: an OAuth bot token issued by Slack, encrypted at rest
• Slack user ID: your Slack user ID, linked to your Agentcard account
• Messages to the Agentcard app: the messages you send to the Agentcard app and its replies, kept to answer you and complete your requests

We do not read messages in your Slack channels or direct messages that are not sent to the Agentcard app.

To stop the app from receiving messages, uninstall the Agentcard app from your Slack workspace. To delete the Slack data we hold, contact us at support@agentcard.sh.

Information collected automatically

• Log data: IP address, browser type, operating system, referring URLs, pages visited, and timestamps
• Device information: device type, unique device identifiers, and mobile network information
• Usage data: how you interact with the Site and services, including API and MCP tool usage patterns, and recordings of your sessions in our dashboard, including what you type into its forms
• Cookies and similar technologies: we use cookies and similar tracking technologies to maintain sessions and improve our services

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Site and services
• Process transactions and send related information
• Create and manage your account
• Send you technical notices, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Monitor and analyze trends, usage, and activity
• Detect, investigate, and prevent fraudulent transactions
• Comply with legal obligations

How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service providers: with third-party vendors including Crossmint and Coinbase (wallet funding), our card program manager and our card issuing partner Third National (card issuing), Sumsub (identity verification), Visa, Stripe, and hosting providers, and with these kinds of providers: AI model providers that process your requests; retail, food delivery, and travel partners that place and fulfill your orders; browser session providers used when you sign in to a store; email, text message, and phone providers; analytics and error monitoring providers; and the collaboration tools our team uses to support you
• Merchants: when you buy something, with the merchant and the partners that fulfill your order: what you bought, your delivery address, and your contact details
• Apps you connect: when you connect an AI assistant or another app to your Agentcard account, with that app: your account email, name, and plan, and the results of the requests it makes for you, such as your orders and their status
• Companies you use Agentcard through: if a company created your account or card, with that company: your name, contact details, date of birth, and card transactions
• Legal compliance: when required by law or governmental request
• Protection of rights: to enforce our Terms of Use and protect rights and safety
• Business transfers: in connection with a merger, acquisition, or sale
• With your consent: when you have given us explicit permission

Mobile phone numbers and SMS opt-in consent are collected solely to provide our messaging services. Text messaging originator opt-in data and consent will not be shared with or sold to any third parties or affiliates for marketing or promotional purposes.

Card issuing services are provided by our issuing partner. The issuer's privacy policy is available here: Issuer Privacy Policy. The account opening privacy notice for Agentcard cards is available here: Account Opening Privacy Notice.

Data Security

We do not store the full number or security code of cards we issue. We retrieve them from our issuing partner only when you, or an agent you authorized, ask for them through an authenticated request, and we return them only to that requester. Your browser encrypts the cards you save in the Vault under a key we never hold. When you attach a card from another bank, our card vault provider holds it, and we keep a one-time card credential, encrypted, for at most 45 minutes to complete a purchase. No method of transmission is completely secure, but we implement appropriate technical and organizational measures.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce our agreements.

Your Rights and Choices

Depending on your jurisdiction, you may have rights to access, correct, delete, or port your data. Contact us at support@agentcard.sh. You can disconnect an app from your Agentcard account at any time, and the app then can no longer reach your account.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the CCPA. We do not sell personal information.

Cookies

We use essential cookies (authentication, security) and analytics cookies. You can control cookies through your browser settings.

Third-Party Analytics

We use Ahrefs Analytics, PostHog, and Vector to help understand usage of the Site, our dashboard, and our documentation. PostHog also records sessions in our dashboard.

Children's Privacy

The Site is not intended for use by anyone under 18. We do not knowingly collect personal information from children under 18.

International Data Transfers

Your information may be transferred to servers located outside your jurisdiction. By using the Site, you consent to the transfer of your information to the United States.

Changes to This Policy

We may update this Privacy Policy from time to time. Continued use constitutes acceptance.

Contact

Agentcard Corporation
Attn: Karina Serfaty
1900 Jefferson St, Apt 202
San Francisco, CA 94123
support@agentcard.sh