AgentProof provides an API that lets software agents record a verifiable receipt for actions they take on a user's behalf. This policy explains what we collect, what we deliberately do not collect, and how long we keep it.
AgentProof (the "Service") is operated by Shanghai Xusheng Dongjun E-Commerce Co., Ltd. (the "Company", "we"), registered in the People's Republic of China. For privacy matters you can reach us at privacy@proofofaction.dev.
| Category | What it is | Why |
|---|---|---|
| Account data | Email address, organisation name, API key metadata, billing identifiers | To operate your account and take payment |
| Receipt metadata | An agent identifier you supply, an action label (e.g. subscription.cancelled), a timestamp, and a cryptographic hash |
To create and verify receipts |
| Technical logs | IP address, request timestamps, HTTP status codes | Security, abuse prevention, debugging |
We do not use receipt data to train machine-learning models, to build user profiles, or for advertising of any kind.
Each account has a unique secret salt. Content hashes are computed with that salt, which means the same underlying values produce different hashes in different accounts, and a hash cannot be reversed by brute-forcing a known catalogue of values.
When you delete a receipt, or close your account, we destroy the associated salt. Once the salt is gone the hash can no longer be linked to any content, including by us. Deletion is therefore effective, not cosmetic.
Note one honest limitation: a hash is only as private as the content behind it. If the content is short and guessable (a yes/no answer, a small number of possible values), a third party who already suspects the content could test that guess against a hash they hold. Do not submit content that is both sensitive and guessable.
If you are located in the European Economic Area, the United Kingdom or Switzerland, we act as a processor for receipt data submitted through the API and rely on appropriate transfer safeguards for any processing carried out outside those territories.
We do not sell, rent, or trade personal data, and we do not operate as a data broker. We share data only with:
Depending on where you live you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to lodge a complaint with a supervisory authority. Write to privacy@proofofaction.dev and we will respond within 30 days.
Receipts are retained until you delete them or close your account. Account data is retained while your account is active and for as long as required for tax and accounting purposes thereafter. Security logs are retained for up to 12 months.
Data is encrypted in transit and at rest. API keys are stored in hashed form. Access to production systems is limited, logged, and requires multi-factor authentication. No system is perfectly secure, and we will notify affected users if a breach affects their data, in line with applicable law.
The Service is a developer tool intended for business use and is not directed at children under 16. We do not knowingly collect data from children.
We may update this policy. Material changes will be announced by email to account holders or through the Service, and the "last updated" date above will change.
AgentProof — privacy@proofofaction.dev