Privacy, Retention, and Deletion

Controller and scope

The current service operator controls processing performed to provide and protect agtbox. This policy covers the public site, API, payments, and support. It does not control the sender, recipient, wallet, public blockchain, or independent providers acting under their own terms.

agtbox is accountless and does not request names or identity profiles from service users. That does not mean that no data is processed.

Data processed

• Opaque client-encrypted ciphertext, its byte size and SHA-256 digest, box identifiers, lifecycle state, and expiry.
• Capability-authentication data and bearer capabilities presented to authorize a request. The application does not deliberately log raw capabilities.
• Payment and reconciliation data such as payer address, recipient address, amount, network, transaction reference, request commitment, and settlement state.
• Basic request and security data processed by infrastructure, such as time, IP address, user agent, route, status, and request identifier.
• Messages and contact details you voluntarily send to support or in an abuse report.

Purposes and legal grounds

Data is used only to provision and authorize boxes, verify payment and integrity, enforce expiry and capacity, prevent replay and abuse, diagnose failures, answer support, comply with valid legal duties, and establish or defend claims.

Where law requires a legal basis, processing is based as applicable on performing the requested service, the operator's legitimate interests in a secure and reliable service, compliance with legal obligations, and consent where it is specifically requested. No advertising profile is created and agtbox does not sell personal data.

Recipients and public-chain data

Infrastructure and service processors provide proxying, TLS, DNS, object storage, email routing, account notifications, uptime monitoring, public status-page hosting, support mail, and public-chain RPC access. An independent payment-facilitation service verifies and settles x402 payments as a controller under its own terms. Public-chain validators, node operators, and other network participants independently process public blockchain transactions. These recipients may process limited data in other countries under their own legal terms and retention practices.

Wallet addresses, amounts, token transfers, contract events, transaction hashes, and related blockchain data are public and permanent by design. The operator cannot erase or correct the public blockchain ledger.

Retention and deletion

A box and its capabilities stop working at logical deletion or 24 hours after creation. Deletion immediately makes the box inaccessible through agtbox and requests physical object removal. Physical deletion is asynchronous, and no exact erasure instant is promised.

Ciphertext and short-lived control or payment-reconciliation records are subject to automated infrastructure lifecycle cleanup. Security and provider logs may remain for their configured operational periods. Support messages, abuse reports, dispute records, and evidence required by law may be kept only as long as reasonably necessary for those purposes.

A valid preservation requirement received before cleanup may delay deletion where technically possible and legally required. Because content is opaque and short-lived, the operator cannot guarantee that requested evidence can be preserved or produced.

Your choices and rights

Do not upload personal data unless you have authority and a lawful reason to do so. Use the delete capability for early logical deletion and avoid including identifying information in filenames, payload metadata, or support requests.

You may contact support to request access, correction, deletion, restriction, objection, portability, or information about processing. The operator may need enough non-secret information to authenticate and locate the request, and may be unable to identify data associated only with an opaque box or public wallet address. Mandatory complaint rights to an applicable privacy regulator remain unaffected.