1. Introduction

Agentcart LLC ("we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, platform, and services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide to us, including:

• Account Information: Name, email address, phone number, company name, and business details when you register for an account
• Payment Information: Billing address and payment method details (processed securely through third-party payment processors)
• Store Data: Product information, inventory data, pricing, images, and other content you choose to sync with our Service
• Communications: Information you provide when you contact us for support, feedback, or inquiries
• Waitlist Information: Email address, platform information, and store URL when you join our waitlist

2.2 Information We Collect Automatically

When you use the Service, we automatically collect:

• Usage Data: Information about how you interact with the Service, including pages viewed, features used, time spent, and actions taken
• Device Information: IP address, browser type, operating system, device identifiers, and referring URLs
• Log Data: Server logs, error reports, and diagnostic information
• Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to collect information and improve the Service

2.3 Information from Third Parties

We may receive information from third-party platforms when you integrate them with our Service:

• E-commerce Platforms: Product data, order information, and inventory from platforms like WooCommerce, Shopify, or Etsy
• Authentication Providers: Profile information if you use third-party sign-in services
• Payment Processors: Transaction confirmation and payment status

3. How We Use Your Information

We use the collected information for the following purposes:

• Provide the Service: Create and manage your account, process integrations, generate agent-readable feeds, and enable AI agent access to your store
• Process Transactions: Handle billing, payments, and financial transactions
• Improve the Service: Analyze usage patterns, optimize performance, develop new features, and fix bugs
• Customer Support: Respond to inquiries, troubleshoot issues, and provide technical assistance
• Communications: Send service updates, security alerts, administrative messages, and marketing communications (with your consent)
• Security: Detect, prevent, and respond to fraud, security threats, and violations of our Terms of Service
• Legal Compliance: Comply with legal obligations, enforce our agreements, and protect our rights
• Analytics: Understand how users interact with the Service and measure the effectiveness of our features

4. How We Share Your Information

We may share your information in the following circumstances:

4.1 With Your Consent

We share your information when you explicitly authorize us to do so, such as when connecting your store to AI agents or third-party services.

4.2 Service Providers

We share information with trusted third-party service providers who assist us in operating the Service:

• Cloud hosting and infrastructure providers
• Payment processing services
• Email and communication services
• Analytics and monitoring tools
• Customer support platforms

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.3 AI Agents and Platforms

When you enable agent access to your store, we share product information, pricing, availability, and checkout capabilities with authorized AI agents through the Agentic Commerce Protocol (ACP) and other supported protocols.

4.4 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal processes (subpoenas, court orders, warrants)
• Government or regulatory requests
• Protection of our rights, property, or safety
• Protection of others' rights, property, or safety
• Investigation of fraud or security issues

4.5 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

4.6 Aggregated or De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you for research, marketing, analytics, or other purposes.

5. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Secure data centers with physical security measures
• Employee training on data protection and privacy
• Incident response and breach notification procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

6. Data Retention

We retain your information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Account Data: Retained while your account is active and for a reasonable period after closure
• Transaction Records: Retained for at least 7 years to comply with financial regulations
• Usage Data: Typically retained for 2 years or as required by law
• Marketing Data: Retained until you opt out or request deletion

When information is no longer needed, we securely delete or anonymize it.

7. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

7.1 Access and Portability

You have the right to access your personal information and request a copy in a portable format.

7.2 Correction

You can update or correct inaccurate information through your account settings or by contacting us.

7.3 Deletion

You can request deletion of your personal information, subject to certain exceptions (e.g., legal requirements, legitimate business needs).

7.4 Opt-Out

You can opt out of marketing communications at any time by clicking the unsubscribe link in emails or adjusting your account preferences.

7.5 Object to Processing

You may object to certain processing of your information, such as for direct marketing purposes.

7.6 Withdraw Consent

Where we rely on your consent to process information, you can withdraw that consent at any time.

To exercise these rights, please contact us using the information provided in Section 13. We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to collect information and improve the Service:

8.1 Types of Cookies

• Essential Cookies: Required for the Service to function properly
• Performance Cookies: Help us understand how users interact with the Service
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Track your activity for advertising purposes (with your consent)

8.2 Managing Cookies

Most browsers allow you to control cookies through their settings. However, disabling cookies may limit your ability to use certain features of the Service.

9. Third-Party Links and Services

The Service may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing them with any information.

10. Children's Privacy

The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will take steps to delete such information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws than your country.

When we transfer your information internationally, we implement appropriate safeguards to protect your information, such as standard contractual clauses approved by relevant authorities.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

14. Additional Information for California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, disclose, and sell
• Right to request deletion of your personal information
• Right to opt-out of the sale of your personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us using the information above. We will verify your identity before processing your request.

15. Additional Information for EU/UK Residents

If you are located in the European Union or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to lodge a complaint with your local data protection authority
• Right to restriction of processing in certain circumstances
• Right to data portability
• Right to object to processing based on legitimate interests

Our legal basis for processing your information includes: performance of a contract, legitimate interests, consent, and compliance with legal obligations.