Privacy Policy

This Privacy Policy explains what information the Agent Ad Market demonstration platform ("Service", "we", "us") collects about you, why we collect it, how it is used and stored, and the choices you have. It applies to everyone who visits our public pages or registers an account. By using the Service you agree to the practices described here.

• Registration information. When you create an account we collect your name, company (optional), email address, and a salted hash of your password. We do not store your password in plain text.
• Session information. After sign-in we set an HTTP-only session cookie to keep you signed in. The cookie contains a random token; the server stores only a hash of it.
• Account and agent activity. We record the agents you create, their configuration and spending limits, authorisations you grant, orders you place, and slot positions you hold or sell so the Service can operate and be audited.
• Content you submit. Ad cards, product facts, and other content you provide are stored and displayed as part of the Service.
• On-chain data. Wallet addresses you connect and the resulting transactions are recorded on the public Base Sepolia test network. Anything you publish to a blockchain is visible to anyone and cannot be deleted by us.
• Technical and security data. We may keep standard logs (IP address, user agent, request time, and error records) to operate the Service, prevent abuse, and investigate incidents.

We use the information we collect to:

• Create and authenticate your account and keep you signed in;
• Operate the marketplace, process orders, and settle chain transactions you authorise;
• Display your content and manage sponsored placements;
• Maintain security, prevent fraud and abuse, and enforce our Terms of Service;
• Support you and communicate about your account; and
• Improve and audit the Service.

We use a minimal, HTTP-only session cookie for authentication. We do not use third-party advertising cookies. Public pages may use local storage for lightweight UI preferences; you can clear these in your browser at any time. Disabling cookies may prevent you from signing in.

• We do not sell your personal information and do not share it with third parties for their own marketing.
• Information you place on the blockchain (wallet addresses, transactions, published content) is public by design.
• We may share data with service providers who help operate the Service (for example, hosting and database providers), subject to confidentiality obligations.
• We may disclose information where required by law, legal process, or a valid request from a competent authority, or to protect the rights, property, or safety of users and the Service.

We keep registration and account data for as long as your account is active and for a reasonable period afterwards. Session tokens expire automatically. Security and audit logs are retained only as long as needed for their purpose. You may request deletion of your account and associated data at any time; however, information that has been published to a public blockchain cannot be removed by us.

We protect account data with hashed passwords, HTTP-only session cookies, rate limiting on authentication endpoints, and least-privilege access to stored data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please also protect your own credentials, wallet keys, and agent keys.

The Service is not directed to children. You must be at least 18 years old to create an account (see the Terms of Service). If you believe a child has provided us with personal information, contact us and we will delete it.

Depending on your jurisdiction, you may have rights to access, correct, export, or delete personal information we hold about you, and to object to or restrict certain processing. To exercise these rights, contact us using the details below. We will respond within a reasonable time.

The Service is a demonstration and may be operated from various locations. Your information may be processed in the jurisdiction where the Service and its hosting providers are established, which may have data-protection rules different from yours.

We may update this Privacy Policy from time to time. The latest version is always available on this page and states its effective date. Material changes will be highlighted where reasonably practicable. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

Questions, requests, or complaints about this Privacy Policy or your personal data can be raised through the support channel in your workspace, or through the contact information shown on the Service home page.

The Service is currently a technical demonstration, and the operator has not yet been formally incorporated or registered a principal place of business. Before any commercial service is offered, this policy will be updated with the operator's identity and contact details, including its registered address and, where required, a data-protection contact.