Privacy Policy
AI Agent is designed from the ground up on the principle of Absolute Self-Custody and Zero-Knowledge Architecture. We do NOT sell, rent, monetize, or harvest your personal data. We do NOT collect your seed phrases, private keys, passwords, or transaction records. Your cryptographic identity belongs entirely to you.
1. Architecture: Self-Custody & Client-Side Cryptography
AI Agent operates strictly as non-custodial software on your local machine:
- Local Encryption: Your 12 or 24-word Secret Recovery Phrase (BIP-39) and derived private keys are encrypted locally on your browser using industry-standard AES-GCM 256-bit cryptography with PBKDF2 key stretching and unique cryptographic salts.
- Zero Access: AI Agent Technologies and its team members never possess, store, or have mathematical access to your unencrypted passwords, phrases, or private keys.
- No Centralized Asset Custody: We never hold or escrow user funds. All on-chain transfers and contract interactions are initiated, signed, and broadcasted directly from your browser.
2. Explanation of Chrome Extension Permissions
In accordance with Google Chrome Web Store Single Purpose and Minimal Permissions policies, AI Agent only requests permissions strictly required to deliver Web3 wallet functionality:
Used exclusively to persist your encrypted vault, user preferences (e.g. selected theme, default currency, address book), and cached token lists locally within Chrome's sandboxed storage engine.
Used solely when you interact with decentralized applications (dApps) to provide the standard window.ethereum Web3 provider injection upon your explicit user connection.
Allows you to utilize Chrome's native Side Panel mode so you can keep your wallet open alongside your active browsing session without popup auto-closing.
Restricted exclusively to public decentralized blockchain nodes (Ethereum, BNB Chain, Solana, Bitcoin Mempool, TronGrid, Arbitrum, Polygon), price reference APIs (CoinGecko), and remote application diagnostic switches (api.wallet-agent.pro).
3. Information We Never Collect
AI Agent does NOT collect or retain any of the following:
- No IP addresses or browsing history
- No unencrypted seed phrases
- No biometric or identity records
- No personal keystroke trackers
4. Virtual Visa Card & Banking Compliance
When you request or top up an AI Agent Virtual Visa debit card:
- PCI-DSS Compliance: Card numbers, dynamic CVVs, and banking allocations are tokenized directly through regulated PCI-DSS Level 1 banking gateway switches.
- Top-Up Processing: Cryptocurrency conversion balances are settled on-chain without storing unencrypted personal financial histories on public databases.
- Cardholder Customization: Any cardholder label customized by the user is stored locally in client state for display presentation.
5. AI Copilot Queries
By default, AI Agent runs on a Native Client-Side Web3 Reasoning Engine that performs analysis locally without sending chat prompts to third-party language models.
If you voluntarily configure your own external API key (e.g. Google Gemini or Groq Llama 3), your queries are transmitted directly and securely from your browser to that specific provider over HTTPS. Your API key remains stored solely in your local extension storage.
6. Optional Zero-Knowledge Cloud Backup
If you opt-in to the Cloud Backup feature, your encrypted vault ciphertext is backed up to a secure Realtime Database. Because the vault is encrypted client-side using your unique password before transmission, server operators have no mathematical ability to inspect your seed phrase or balance.
7. Zero Data Selling & Third-Party Sharing
We do not sell, trade, or transfer any user data to outside parties, advertising brokers, or data analytics firms. We do not embed behavioral tracker pixels or third-party marketing SDKs in our extension package.
8. Contact & Compliance Inquiries
If you have questions, regulatory compliance requests, or security audits regarding this Privacy Policy, contact our dedicated security team: