Last updated August 31, 2026
AgentTX privacy notice
AgentTX is an early-stage transaction authorization and spend-control service for AI Agents. This notice explains the information used to operate the public sandbox and authenticated control plane.
Information we process
- OIDC account subject, verified email, display name, organization membership, and role.
- Agent names, policies, budgets, approval decisions, transaction evidence, and operational audit events that you create.
- Agent credentials only as one-way hashes. The original credential is displayed to you once and is not recoverable by AgentTX.
- For Policy Lab abuse control and completion evidence: a random browser participant identifier plus salted IP and user-agent hashes. Public evidence contains commitments, not the raw values.
- If you voluntarily join the first-user pilot: the minimum contact, consent record, verification basis, proof-code commitment, and product feedback needed to verify a distinct participant. The raw completion code is discarded after matching.
- Basic service logs needed for security, reliability, and incident investigation.
How we use it
We use this information to authenticate members, isolate organizations, evaluate policies, enforce budgets, create audit evidence, prevent abuse, and maintain service reliability. We do not sell personal information or use workspace content to train models.
Infrastructure and retention
Cloudflare proxies public traffic. Authentication, hosting, and database providers process only the data needed to provide their services. Workspace and audit records are retained while the service is active or as reasonably needed for security and transaction evidence. Backups may persist for a limited recovery period. Private first-user pilot contact records are scheduled for deletion 90 days after that cohort closes unless you withdraw earlier.
Your choices
You can avoid entering personal data in Agent names, policies, and metadata, and you can complete the Policy Lab without joining the verified pilot. You may withdraw from the pilot or request access, correction, or deletion by contacting [email protected]. Some audit evidence may need to be retained where required for security or transaction integrity.