₿ AgenticBTC

AgenticBTC — Privacy Policy

Effective Date: March 8, 2026

Last Updated: March 4, 2026

---

1. Introduction

This Privacy Policy describes how BK Block Solutions ("Company," "we," "us," or "our") collects, uses, shares, and protects information in connection with the AgenticBTC platform, API, dashboard, and related services (collectively, the "Service") available at agenticbtc.io.

By using the Service, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, do not use the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

Email address
Name or organizational name
Account password (stored in hashed form only)
Billing information (for Service Fee collection)

2.2 API and Service Configuration Data

To provide routing functionality, we store certain configuration data:

Service API keys for connected custodial rails (e.g., Coinbase, Strike, PayPal, Venmo, Stripe): These credentials are stored server-side in encrypted form to enable routing operations on your behalf.

Wallet and spend credentials (private keys, seed phrases, signing keys): These are NEVER stored on our servers. AgenticBTC is non-custodial. Wallet-level credentials remain exclusively on your device, node, or local environment. We do not have access to, and cannot access, your private keys or wallet credentials at any time.

Your AgenticBTC API key: Generated and stored to authenticate your API requests.

2.3 Transaction Metadata

When the Service routes a transaction, we collect:

Routing request parameters (amount, currency, destination type)
Selected payment rail
Routing decision rationale (for optimization analytics)
Timestamp
Transaction status (success, failure, pending)
Service Fee amount and collection status

We do not store the full content of payment instructions sent to third-party rails. We record metadata necessary for routing optimization, fee accounting, and service improvement.

2.4 Usage and Technical Data

We automatically collect:

IP address
Browser type and version (for dashboard access)
Device and operating system information
API request logs (endpoints accessed, timestamps, response codes)
Dashboard interaction data
Referring URLs

2.5 Information from Third Parties

We may receive limited information from connected payment rails, such as transaction confirmation status, for the purpose of providing routing status updates to you.

3. How We Use Your Information

We use collected information for the following purposes:

Providing the Service: Processing routing requests, selecting optimal payment rails, and collecting Service Fees.
Account management: Authenticating your identity, managing your account, and communicating with you about the Service.
Service improvement: Analyzing routing performance, optimizing rail selection algorithms, and improving the user experience.
Security and fraud prevention: Detecting, investigating, and preventing unauthorized access, abuse, and fraudulent activity.
Compliance: Meeting legal and regulatory obligations, including sanctions screening and responding to lawful requests from authorities.
Fee administration: Calculating, collecting, and reconciling Service Fees.
Communications: Sending service-related notices, updates, and security alerts. We do not send marketing emails without your opt-in consent.

4. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

4.1 Third-Party Payment Rails

When you initiate a routing request, certain transaction data is transmitted to the selected third-party payment rail to execute the payment. This data transmission is inherent to the Service's function and is governed by the respective rail provider's privacy policy.

4.2 Service Providers

We engage third-party service providers for hosting, analytics, monitoring, and customer support. These providers access information only as necessary to perform their functions and are contractually obligated to protect your data.

4.3 Legal Requirements

We may disclose information if required to do so by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect the rights, property, or safety of the Company, our users, or the public.

4.4 Business Transfers

In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of the transaction. We will provide notice of any such transfer and any changes to this Privacy Policy.

4.5 With Your Consent

We may share information with your explicit consent or at your direction.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Specific retention periods:

| Data Type | Retention Period |

|-----------|-----------------|

| Account information | Duration of account plus 3 years after closure |

| Transaction metadata | 7 years (for regulatory and accounting purposes) |

| API request logs | 90 days |

| Service API keys for connected rails | Duration of account; deleted upon account closure or disconnection |

| Usage and technical data | 12 months |

We may retain de-identified or aggregated data indefinitely for analytics and service improvement purposes.

6. Data Security

We implement industry-standard technical and organizational measures to protect your information, including:

Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
Encrypted storage of service API keys for connected rails
Access controls and authentication requirements for internal systems
Regular security assessments and monitoring
Incident response procedures

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights and Choices

7.1 Access and Portability

You may request a copy of your personal data by contacting us at [email protected]. We will provide the data in a structured, commonly used, machine-readable format within 30 days.

7.2 Correction

You may update your account information through the dashboard or by contacting us.

7.3 Deletion

You may request deletion of your personal data by contacting us. We will comply within 30 days, subject to any legal retention obligations. Note that deletion of your account will terminate your access to the Service.

7.4 Opt-Out of Communications

You may opt out of non-essential communications at any time by using the unsubscribe link in emails or adjusting your dashboard notification settings. You cannot opt out of service-critical communications (e.g., security alerts, Terms updates).

8. California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
Right to Delete: You may request deletion of your personal information, subject to legal exceptions.
Right to Correct: You may request correction of inaccurate personal information.
Right to Opt Out of Sale or Sharing: We do not sell or share your personal information as defined under the CCPA/CPRA.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at [email protected] or use the mechanisms described in Section 7. We will verify your identity before processing requests.

9. European Economic Area, UK, and Swiss Residents (GDPR)

If you are located in the EEA, UK, or Switzerland:

Legal Basis for Processing: We process personal data based on: (a) performance of our contract with you (providing the Service); (b) our legitimate interests (security, service improvement); (c) compliance with legal obligations; and (d) your consent where applicable.
Data Transfers: Your data may be transferred to and processed in the United States. We implement appropriate safeguards, including Standard Contractual Clauses, to protect transferred data.
Additional Rights: In addition to the rights in Section 7, you have the right to restrict processing, object to processing, and lodge a complaint with your local supervisory authority.
Data Protection Contact: [email protected]

10. Cookies and Tracking Technologies

10.1 Dashboard Cookies

The AgenticBTC dashboard uses cookies and similar technologies for:

Essential cookies: Session management, authentication, and security. These are strictly necessary and cannot be disabled.
Functional cookies: Remembering your preferences and settings.
Analytics cookies: Understanding how users interact with the dashboard to improve the Service. We use privacy-respecting analytics tools.

10.2 API

The API does not use cookies. API authentication is performed via API keys.

10.3 Your Choices

You may configure your browser to reject non-essential cookies. Disabling essential cookies may prevent you from using the dashboard.

11. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the dashboard or email. The "Last Updated" date at the top of this page indicates the most recent revision. Continued use of the Service after changes constitutes acceptance.

13. Contact Us

For questions, requests, or concerns about this Privacy Policy or our data practices:

BK Block Solutions

Email: [email protected]

Website: https://agenticbtc.io

For data protection inquiries specifically: [email protected]

---

← Back to Dashboard