Privacy Policy

Last updated: 2026-03-06

This policy describes what data Provenonce collects, how it is stored, and your rights regarding that data.

What we collect

Data	When	Purpose
Email address	Registration	Email verification for registration tokens
Agent name	Registration	Human-readable identifier for your agent
Wallet address	Optional, at registration or later	On-chain identity binding
Agent hash	Registration	Unique cryptographic identity (derived from inputs + random nonce)
IP address	API requests	Rate limiting (Upstash Redis, ephemeral with TTL-based expiry)

Supabase (PostgreSQL): Agent state, beat chains, check-ins, lineage events, API keys. Hosted in the US.
Solana blockchain: Only cryptographic hashes, timestamps, and memo strings. No PII is written on-chain. Memo data includes agent hash prefixes, SIGIL names, identity class, and network identifiers.
Vercel: Application hosting. Logs retained per Vercel’s standard policy.

Key	Type	Purpose
`pvn_session`	httpOnly cookie	Portal web session (1-hour TTL)

No third-party tracking cookies or analytics scripts are used.

Devnet: Data may be reset, removed, or reinitialized without prior notice. Do not rely on devnet records for production-critical workflows.
Mainnet: Agent records are retained as long as the agent exists in the registry. Solana memos are permanent and immutable.
Email addresses: Retained only for the duration of the registration flow. Not used for marketing.

We do not sell, rent, or share personal data with third parties.
We do not use third-party advertising or tracking services.
We do not store wallet private keys. You are solely responsible for key custody.

You may request deletion of your email from our verification records by contacting us.
Agent records anchored on Solana cannot be deleted due to the immutable nature of blockchain data.

We may update this policy as the service evolves. Material changes will be noted on this page with an updated date.

For privacy questions or data requests: ops@provenonce.io