Privacy Policy

1. Introduction

AIbrokerAGEnt LLC ("AIbrokerAGEnt," "we," "our," or "us") operates the trust infrastructure platform at ai-broker-agent.com. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

This is a business-to-business (B2B) platform. The primary data subjects are operators and developers who register accounts and deploy agents through our API. We do not collect data from consumers or end users of operator-built applications.

2. Information We Collect

We collect the following categories of information:

• Account information — operator name, company name, and email address provided during registration
• Agent registration data — agent identifiers, agent type, registration metadata, and configuration submitted through the API
• Behavioral scores — AATS trust scores and attestation records generated by the platform based on agent behavior data you submit
• API usage logs — request timestamps, endpoints accessed, response codes, and associated agent identifiers; used for platform operation, security monitoring, and billing
• ALR records — lifecycle events (deployment, updates, end-of-service) associated with registered agents
• Communications — emails or messages you send to us

We do not collect payment card numbers or banking information directly. Payment processing is handled by third-party processors (Stripe, Coinbase Commerce) who maintain their own privacy practices.

We do not collect personal data from consumers or end users of applications built by our operators. Operators are responsible for their own privacy obligations with respect to their users.

3. How We Use Your Information

We use the information we collect to:

• Operate and maintain the Platform, including processing API requests and generating trust attestations
• Compute and store AATS behavioral scores and issue BVAP certificates
• Maintain Agent Lifecycle Records (ALR) for audit and compliance purposes
• Communicate with you about your account, platform updates, and support requests
• Monitor for security incidents, abuse, and AATS compliance violations
• Process payments when billing is active
• Comply with legal obligations

4. Information Sharing and Disclosure

We do not sell your personal information. We do not share your information with advertising networks or data brokers.

We may share information with:

• Cloudflare — hosting, CDN, and DDoS protection for the Platform
• Stripe — payment processing (when billing is active)
• Coinbase Commerce — cryptocurrency payment processing (when active)
• Legal authorities — when required by law, court order, or to protect our legal rights

Each third-party service provider is contractually bound to use your information only as necessary to provide their services to us.

5. Data Retention

We retain account information and associated data for as long as your account is active.

ALR records may be retained after account closure to preserve the integrity of audit trails for agents that were registered on the Platform. This retention supports legitimate audit and compliance purposes for operators, enterprises, and regulated industries that interacted with your registered agents.

API usage logs are retained for up to 90 days for security and operational purposes.

You may request deletion of your account and associated data at any time (see Section 6). We will honor deletion requests subject to our ALR retention obligations described above.

6. Your Rights

You have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request correction of inaccurate or incomplete information
• Deletion — request deletion of your account and personal data, subject to ALR retention obligations
• Portability — request your data in a structured, machine-readable format where technically feasible

To exercise any of these rights, contact us at johnnyderos@gmail.com. We will respond within 30 days.

7. GDPR Rights (EU / EEA)

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to object — object to processing of your personal data in certain circumstances
• Right to restriction — request that we restrict processing of your data in certain circumstances
• Right to lodge a complaint — file a complaint with your local data protection authority

Our legal basis for processing operator account data is the performance of a contract (providing the Platform services). Our legal basis for retaining ALR records after account closure is legitimate interests (audit integrity for regulated industries).

8. CCPA Rights (California)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to know — request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to delete — request deletion of your personal information, subject to certain exceptions
• Right to opt out of sale — we do not sell personal information, so this right is not applicable
• Right to non-discrimination — we will not discriminate against you for exercising your CCPA rights

9. Cookies and Tracking

The Platform uses minimal cookies. We use session cookies that are strictly necessary for the Platform to function (for example, to maintain your authenticated session). We do not use advertising cookies, tracking pixels, or third-party analytics tools.

Cloudflare, our hosting provider, may set cookies for security and performance purposes as part of their standard infrastructure services.

10. Security

We implement reasonable technical and organizational measures to protect your information, including API key authentication, encrypted transmission (HTTPS/TLS), and access controls. No system is completely secure, and we cannot guarantee absolute security.

If you believe there has been a security incident affecting your account or data, contact us immediately at johnnyderos@gmail.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date above and notify active account holders by email. Continued use of the Platform after notice constitutes acceptance of the updated policy.

12. Contact

Privacy questions, requests, or concerns should be directed to:
johnnyderos@gmail.com
AIbrokerAGEnt LLC  ·  North Carolina, USA

We will respond to all privacy requests within 30 days.