Privacy policy.

Social Protocol Labs LLC ("Company," "we," "our," or "us") operates the KnowYourAgent platform ("KYA" or "Platform"), which provides AI agent verification and commerce infrastructure services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform, APIs, and related services.

By accessing or using KnowYourAgent, you consent to the practices described in this Privacy Policy. If you do not agree with these practices, please do not use our services.

Operator account information

• Identity Data: Legal entity name, business registration details, contact information (email, phone), and authorized representative details.
• Authentication Credentials: Email addresses, hashed passwords, OAuth tokens, and API keys for platform access.
• Commercial Contact Data: Information you provide when requesting demos, onboarding help, or support.

AI agent data

• Agent Registration: Agent identifiers (KYA IDs), capabilities declarations, spending limits, and operator associations.
• Behavioral Telemetry: Transaction patterns, verification success rates, API call frequencies, and performance metrics.
• Trust Scores: Computed trust metrics, historical reputation data, and verification status records.
• Trace Data: Signed trace identifiers and related metadata linking agents to transactions for verification, checkout, and dispute workflows.

Merchant data

• Integration Data: API endpoints, webhook configurations, and verification preferences.
• Transaction Records: Verification requests, dispute alerts, and resolution outcomes.
• Badge Information: Merchant verification status and "Agent-Friendly" certification data.

Technical data

• Log Data: IP addresses, browser type, device information, access timestamps, and referring URLs.
• Cookies: Session identifiers, authentication tokens, and analytics data (see Cookie Policy section below).
• API Usage: Request/response logs, rate limiting data, and error records for service maintenance.

We use the collected information for:

• Service Delivery: Providing agent verification, trust scoring, and related platform services.
• Trust Network: Computing reputation scores and returning verification context to merchants and operators.
• Dispute Resolution: Supporting pre-dispute alerts and evidence retrieval workflows.
• Security: Detecting fraud, preventing unauthorized access, and maintaining platform integrity.
• Compliance: Meeting legal obligations, responding to lawful requests, and enforcing our terms.
• Improvements: Analyzing usage patterns to enhance platform performance and develop new features.
• Communications: Sending service updates, security alerts, and (with consent) promotional materials.

We may share your information with:

• Network Participants: Anonymized or aggregated trust signals shared with merchants in the KYA network for fraud prevention (individual transaction details are not shared without consent).
• Service Providers: Third-party vendors who assist with hosting, payment processing, analytics, and customer support under contractual confidentiality obligations.
• Legal Requirements: Law enforcement or regulatory authorities when required by law or to protect our rights and safety.
• Business Transfers: In connection with mergers, acquisitions, or asset sales, where data may be transferred to the successor entity.

We do not sell personal information to third parties for marketing purposes.

We use cookies and similar tracking technologies for:

• Essential Cookies: Required for authentication, security, and core platform functionality.
• Analytics Cookies: Help us understand how visitors interact with our Platform (e.g., Google Analytics).
• Preference Cookies: Remember your settings and preferences for a better experience.

You can manage cookie preferences through our cookie consent banner or your browser settings. Disabling essential cookies may affect Platform functionality.

We implement industry-standard security measures including:

• Encryption and Transport: We use encryption and secure transport where appropriate for the service.
• Access Controls: Role-based permissions and credentialed access for sensitive systems.
• Monitoring: Logging and operational monitoring to help detect misuse and maintain service reliability.
• Signed Records: Trace and verification data may include signed identifiers and stable references used by the platform.

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

We retain account, verification, trace, support, and analytics data for as long as needed to operate the service, meet legal obligations, resolve disputes, and enforce our agreements. Actual retention periods vary by data type, contract, and applicable law.

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data (subject to legal retention requirements).
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to certain processing activities, including direct marketing.
• Restriction: Request restriction of processing in certain circumstances.

To exercise these rights, contact us at privacy@mail.knowyouragent.xyz.

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including standard contractual clauses approved by relevant data protection authorities.

KnowYourAgent is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last Updated" date. Your continued use of the Platform after changes constitutes acceptance of the updated policy.