Privacy Policy · Effective September 14, 2026

How we collect, use, and protect your data.

Agent Banks is non-custodial infrastructure for autonomous software. We collect only the data we need to operate the platform, keep it secure, and share it only with the specialized third parties that make payments possible.

overview

What this policy covers

This Privacy Policy describes how Agent Banks Inc. ("Agent Banks", "we", "us", or "our") collects, uses, stores, and shares personal information when you visit our website, use our developer platform, or otherwise interact with our services. It applies to visitors, waitlist subscribers, developers, and authorized users of Agent Banks accounts.

We design our systems around data minimization: we ask for what we need, use it only for the purpose disclosed, and keep it no longer than necessary. We do not sell your personal information, and we do not use it for behavioral advertising.

data we collect

Information you provide and we generate

  • Account and contact data: email address, company or project name, and any information you submit through our waitlist or onboarding forms.
  • Platform usage data: API request metadata, agent identifiers, prompt trace IDs, error logs, and diagnostic information needed to operate and secure the service.
  • Payment and transaction data: card references, transaction amounts, merchant category codes, authorization decisions, and linked account tokens. We do not store full bank account numbers or raw card PANs.
  • Technical data: IP address, browser type, device identifiers, and cookies or similar technologies used for security and service reliability.

how we use data

Purpose-limited use

We use the information we collect to provide, maintain, and improve Agent Banks; to authenticate users; to process and authorize payments; to detect fraud, abuse, and security incidents; to communicate with you about your account and the service; and to comply with legal obligations.

We process payment data only as necessary to execute the instructions you authorize through our platform. We do not build advertising profiles or sell personal data to third parties.

third-party services

Who processes data on our behalf

Agent Banks relies on a small set of specialized service providers to move money safely. Each provider receives only the data required for its specific function and is contractually bound to protect it.

  • Card networks and partner issuers — when you bring your own card, it is tokenized and stored as a reference only; we do not retain raw card numbers. If you choose to obtain a card through one of our partner issuers, that issuer receives the details required to open and maintain the card.
  • Tillo — issues merchant gift cards when a merchant accepts gift cards but not direct agentic card payments. Tillo receives the merchant, amount, and delivery details required to issue the gift card.
  • Agent — executes the actual payment instructions. Agent receives authorization payloads, trace IDs, and settlement details required to route funds to the intended recipient.
  • Stripe — processes ACH debits in the United States and ACSS PADs in Canada to replenish operating liquidity. Stripe receives bank account tokens and transaction amounts under your explicit authorization.

data sharing

We do not sell your data

Agent Banks does not sell, rent, or trade personal information. We share data only with the service providers listed above, with law enforcement when required by a lawful request, or in connection with a business transfer such as a merger or acquisition, subject to confidentiality obligations.

security & retention

How long we keep information

We retain personal and transaction data for as long as your account is active and for the period afterward required by law, tax obligations, fraud prevention, and dispute resolution. Technical logs are retained for security monitoring and typically expired on a rolling schedule.

We use encryption in transit and at rest, least-privilege access, multi-factor authentication for internal systems, and regular security reviews. Full details are available on our Security page.

your rights

Access, correction, and deletion

Depending on your jurisdiction, you may have the right to access, correct, delete, or restrict processing of your personal information, and to receive a copy in a portable format. To exercise these rights, contact us at the address below. We will respond within the timeframe required by applicable law.

children

No use by minors

Agent Banks is not directed to children under 18, and we do not knowingly collect personal information from anyone under 18. If you believe we have collected data from a minor, please contact us so we can delete it.

changes

Updates to this policy

We may update this Privacy Policy as our service or the law changes. We will post the revised policy on this page with a new effective date. Continued use of Agent Bank after the effective date constitutes acceptance of the updated policy.

contact

Questions about privacy

For privacy requests, data deletion questions, or concerns about this policy, reach us through our contact form. Select "Privacy request" as the topic and we will respond directly.