Privacy Policy

Introduction

Social Protocol Labs LLC ("Company," "we," "our," or "us") operates the KnowYourAgent platform ("KYA" or "Platform"), which provides AI agent verification, trust certification, and commerce infrastructure services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform, APIs, and related services.

By accessing or using KnowYourAgent, you consent to the practices described in this Privacy Policy. If you do not agree with these practices, please do not use our services.

Information We Collect

Operator Account Information

• Identity Data: Legal entity name, business registration details, contact information (email, phone), and authorized representative details.
• Authentication Credentials: Email addresses, hashed passwords, OAuth tokens, and API keys for platform access.
• Billing Information: Payment method details processed through our secure payment providers (we do not store full card numbers).

AI Agent Data

• Agent Registration: Agent identifiers (KYA IDs), capabilities declarations, spending limits, and operator associations.
• Behavioral Telemetry: Transaction patterns, verification success rates, API call frequencies, and performance metrics.
• Trust Scores: Computed trust metrics, historical reputation data, and verification status records.
• Trace Data: X-KYA-Trace-ID tokens linking agents to transactions for audit and dispute resolution purposes.

Merchant Data

• Integration Data: API endpoints, webhook configurations, and verification preferences.
• Transaction Records: Verification requests, dispute alerts, and resolution outcomes.
• Badge Information: Merchant verification status and "Agent-Friendly" certification data.

Technical Data

• Log Data: IP addresses, browser type, device information, access timestamps, and referring URLs.
• Cookies: Session identifiers, authentication tokens, and analytics data (see Cookie Policy section below).
• API Usage: Request/response logs, rate limiting data, and error records for service maintenance.

How We Use Your Information

We use the collected information for:

• Service Delivery: Providing agent verification, trust scoring, and certification services.
• Trust Network: Computing reputation scores and enabling the Merchant Network Trust Intelligence features.
• Dispute Resolution: Supporting pre-dispute alerts, evidence chains, and chargeback protection services.
• Security: Detecting fraud, preventing unauthorized access, and maintaining platform integrity.
• Compliance: Meeting legal obligations, responding to lawful requests, and enforcing our terms.
• Improvements: Analyzing usage patterns to enhance platform performance and develop new features.
• Communications: Sending service updates, security alerts, and (with consent) promotional materials.

Data Sharing and Disclosure

We may share your information with:

• Network Participants: Anonymized or aggregated trust signals shared with merchants in the KYA network for fraud prevention (individual transaction details are not shared without consent).
• Service Providers: Third-party vendors who assist with hosting, payment processing, analytics, and customer support under contractual confidentiality obligations.
• Legal Requirements: Law enforcement or regulatory authorities when required by law or to protect our rights and safety.
• Business Transfers: In connection with mergers, acquisitions, or asset sales, where data may be transferred to the successor entity.

We do not sell personal information to third parties for marketing purposes.

Cookie Policy

We use cookies and similar tracking technologies for:

• Essential Cookies: Required for authentication, security, and core platform functionality.
• Analytics Cookies: Help us understand how visitors interact with our Platform (e.g., Google Analytics).
• Preference Cookies: Remember your settings and preferences for a better experience.

You can manage cookie preferences through our cookie consent banner or your browser settings. Disabling essential cookies may affect Platform functionality.

Data Security

We implement industry-standard security measures including:

• Encryption: AES-256-GCM encryption for data at rest and TLS 1.3 for data in transit.
• Access Controls: Role-based access, multi-factor authentication, and least-privilege principles.
• Infrastructure: Secure cloud hosting with regular security audits and monitoring.
• Cryptographic Signatures: Ed25519-signed tokens for trace IDs and audit trails.

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

Data Retention

We retain your data as follows:

• Account Data: For the duration of your account plus 30 days after termination.
• Agent Records: Trust scores and verification history retained for 3 years for network integrity.
• Audit Logs: Transaction traces and dispute records retained for 7 years for legal compliance.
• Analytics Data: Aggregated usage data retained indefinitely in anonymized form.

Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data (subject to legal retention requirements).
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to certain processing activities, including direct marketing.
• Restriction: Request restriction of processing in certain circumstances.

To exercise these rights, contact us at privacy@mail.knowyouragent.xyz.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including standard contractual clauses approved by relevant data protection authorities.

Children's Privacy

KnowYourAgent is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last Updated" date. Your continued use of the Platform after changes constitutes acceptance of the updated policy.