AgentPay — Privacy Policy

Last updated: 2026-06-18

AgentPay is an x402 payment gateway and economic-intelligence layer for AI agents. This policy explains what data AgentPay processes when an agent (or its operator) uses our tools, MCP server, SDK, or gateway at agentpay.tools. AgentPay is built for autonomous agents, not human end users, and we do not collect names, emails, or other personal identifiers.

What we process

• Agent wallet address & session identifiers — the public Stellar/Base address and session token, used to enforce budget caps, route payments, and produce receipts. We never receive your private keys; payments are signed client-side.
• Tool-call metadata — the tool name, the parameters you send (e.g. a token symbol), the amount, on-chain transaction hash, network, and timestamp — recorded in our usage/payment logs.
• Network/technical data — request IP address and user-agent, used for rate limiting and abuse prevention.

On-chain data

Payments settle on public blockchains (Stellar, Base). On-chain transactions — addresses, amounts, and tx hashes — are public by nature and outside AgentPay's control. The public receipt ledger (/ledger) displays only the AgentPay flagship agent's own on-chain activity.

Third parties

To fulfill a tool call, AgentPay forwards the necessary request parameters to upstream public data providers (including CoinGecko, Binance, Bybit, OKX, CoinMarketCap, Etherscan, DeFiLlama, GoPlus, Dune Analytics, alternative.me, Reddit, and Jina) and to payment facilitators (Coinbase CDP for Base; Stellar Horizon). Each has its own privacy policy. Usage and payment logs are stored with our database provider, Supabase. We do not sell data, and we do not use it for advertising.

Storage & retention

Usage and payment logs are stored to operate the service (budget enforcement, receipts, and aggregate analytics) and retained only as long as needed for those purposes and any legal or accounting obligations.

Your choices

Free tools require no funded wallet and the MCP server can run with an ephemeral identity. You control which tools you call and what parameters you send.

Changes

We may update this policy; material changes will be reflected by the "Last updated" date above.

Contact

Questions about this policy: [email protected].