Privacy Policy

1. Who We Are

AgenticMarket is operated as a sole proprietorship based in Aurangabad, Maharashtra, India. For privacy-related matters, you can contact us at privacy@agenticmarket.dev.

2. Information We Collect

We collect only the information necessary to operate the platform.

2.1 Information You Provide

• Account information: Your name, email address, and username when you register.
• Profile and payout settings: Optional profile details (bio, website, social links, public email, location), plus payout email, phone number, and country when you configure payments or creator payouts.
• Creator information: Your MCP server URL, skill descriptions, and payout email if you publish a skill as a creator.
• Community submissions: Any content, metadata, tags, and links you submit through community or explore contribution flows.
• Social sign-in data: If you sign in with Google or GitHub, we receive your provider account identifier and basic profile data needed for login.
• Support communications: Any information you provide when contacting us for support.

2.2 Information Collected Automatically

• Usage data: Skill call logs including timestamp, skill name, call status (success, failure, timeout), and credits deducted. We do not log the content of tool call requests or responses.
• API key hash: Your API key is stored as a one-way SHA-256 hash. We cannot reconstruct your plaintext key.
• Session and security data: Session tokens and related metadata (including IP address and user agent) used to keep accounts secure and detect abuse.
• Analytics and performance telemetry: Privacy-focused website analytics and performance data collected through Umami and Vercel Analytics/Speed Insights.
• Rate-limit cookies: Signed, HTTP-only cookies used by our playground probe endpoints to enforce fair-use rate limits and protect infrastructure.

2.3 Payment Information

We do not collect or store your card details. Payments are processed by Cashfree Payments, who handle all card data directly. We receive transaction details needed to credit your wallet and reconcile orders (for example order ID, status, credited amount, and customer contact details required for checkout such as name, email, and phone). See Section 5 for details.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your account
• To authenticate your API requests and route them to the correct server
• To process credit purchases and credit your account balance
• To calculate and distribute creator earnings based on skill usage
• To send transactional emails — account verification OTPs, skill approval notifications, payout confirmations, and security alerts. We do not send marketing emails without your explicit consent.
• To detect and prevent fraud, abuse, and Terms of Service violations
• To monitor platform reliability, performance, and product usage trends
• To maintain financial records required for tax and regulatory compliance

We do not sell, rent, or trade your personal data to any third party for commercial or marketing purposes.

4. Legal Basis for Processing (EU / UK Users)

If you are located in the European Union or United Kingdom, we process your personal data under the following legal bases as defined under the General Data Protection Regulation (GDPR) and UK GDPR:

• Contract performance: Processing necessary to provide you the platform services you signed up for — account creation, billing, skill routing.
• Legitimate interests: Security monitoring, fraud prevention, and platform abuse detection.
• Legal obligation: Retaining financial transaction records as required by applicable tax law.
• Consent: Sending optional communications beyond transactional emails, where we will ask for your consent separately.

5. Third-Party Services and Data Processors

We use the following third-party services to operate the platform. Each acts as a data processor on our behalf and is bound by applicable data protection obligations.

We may add new service providers as the platform grows. We will update this policy when we do and notify you if the change materially affects how your data is processed.

6. Data Processed by Third-Party Skills/MCP Server

When you invoke a skill, the tool call parameters you send are forwarded to the creator's MCP server. AgenticMarket forwards these requests but does not log or store their content.

We require creators to handle user data responsibly. However, AgenticMarket is not responsible for how individual creators or their underlying services process data you submit through skill calls.

Do not submit sensitive personal information, passwords, API keys, or confidential data through MCP server unless you trust the creator and have reviewed how they handle it.

7. Cookies and Tracking

We use strictly necessary cookies to maintain authenticated sessions, secure requests, and operate platform features. We also use signed HTTP-only cookies on certain API endpoints (for example, playground probe rate limiting) to prevent abuse.

We use privacy-focused analytics and performance telemetry tools, including Umami and Vercel Analytics/Speed Insights, to understand product usage and reliability. We do not use advertising cookies, retargeting pixels, or data-sale based profiling.

8. Data Retention

We retain your personal data for as long as your account is active. Specific retention periods:

• Account data: Retained until you delete your account
• Transaction and billing records: Retained for 7 years after the transaction date for tax and financial compliance obligations, even after account deletion
• Usage logs: Retained for up to 12 months in normal operations, and longer only when needed for fraud investigations, legal claims, security incidents, or regulatory obligations
• Account deletion records: On account deletion we anonymise or remove profile-level data, while retaining required financial, audit, and safety records

9. International Data Transfers

AgenticMarket is based in India. When you use our platform, your data may be processed by our service providers in other countries including the United States (for example Vercel, Resend, Google, and GitHub) and other jurisdictions where our infrastructure or processors operate. These transfers are made under appropriate safeguards including standard contractual clauses and service provider commitments required by applicable law.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data. You can initiate this from Settings → Danger Zone. Note that financial records may be retained as described in Section 8.
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, email us at privacy@agenticmarket.dev. We will respond within 30 days. EU and UK users may also lodge a complaint with their local data protection authority.

11. California Users (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) including the right to know what personal information we collect, the right to delete it, and the right to opt out of sale.

We do not sell personal information. To exercise your CCPA rights, contact us at privacy@agenticmarket.dev.

12. Children's Privacy

AgenticMarket is not directed at or intended for use by anyone under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a user is under 18, we will immediately delete their account and associated data.

13. Security

We implement industry-standard security measures including SHA-256 hashing of API keys, HTTPS encryption for all data in transit, and access controls on our database. However, no system is completely secure. In the event of a data breach that affects your personal data, we will notify you in accordance with applicable law.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or by a prominent notice on the platform before they take effect. The date at the top of this page reflects when the policy was last updated.

15. Contact

For any privacy-related questions, data access requests, or deletion requests contact us at privacy@agenticmarket.dev. We aim to respond within 30 days.