Privacy Notice

1. Who we are

Agent Relay Console provides a metered tool API, MCP server and web console for autonomous agents. Agent Relay Console is the data controller for the personal data described in this notice — we decide why and how it is processed.

2. Data we collect and why

• Account data (email address, display name, login credentials managed by our authentication provider, workspace and membership records) — to create and secure your account and workspace. Legal basis: performance of our contract with you.
• Content data (conversations, messages, tool call arguments and results you or your agents submit) — to provide the Service and show your history. Legal basis: performance of our contract.
• Usage and telemetry (tool call events, credit ledger entries, API key identifiers and last-used timestamps, rate limit counters, request IDs, latency, error codes, IP address) — to meter credits, apply rate limits, prevent abuse and debug faults. Legal basis: performance of our contract and our legitimate interest in a secure, correctly billed service.
• Audit logs of workspace actions — to provide accountability to workspace owners and to investigate security incidents. Legal basis: legitimate interests and legal obligations.
• Support correspondence — to answer your questions. Legal basis: legitimate interests.

Payment card details are never collected or stored by us; card payments are processed by our payment processor, Stripe, which handles your card data under its own privacy policy.

3. Who we share data with

• Service providers and subprocessors — cloud hosting, database, authentication and AI model providers that operate the Service on our instructions.
• Payment and settlement records — we sell credits directly and record our own billing data. Card payments are processed by Stripe, which receives the data needed to complete the transaction. Payments settled in USDC on the Base network are recorded on a public blockchain, including the paying wallet address, amount and transaction hash; we cannot alter or delete that public record.
• Professional advisers such as legal and accounting firms, where necessary.
• Authorities, where required by law or to establish, exercise or defend legal claims.

We do not sell personal data.

4. International transfers

Our providers may process data outside your country, including outside the UK and EEA. Where that happens we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

5. Retention

Account, conversation and usage records are kept for as long as your account is active. After account closure we delete or anonymise personal data within a reasonable period, except where we must keep records longer to meet legal, tax or accounting obligations, or to resolve disputes.

6. Your rights

Subject to applicable law, you may request access to your personal data, correction of inaccurate data, erasure, restriction of or objection to processing, and portability, and you may withdraw consent where processing relies on it. We aim to respond within one month. If you are in the UK or EEA you also have the right to complain to your local supervisory authority. To exercise a right, contact us through the support channel listed in your console.

7. Security

We apply appropriate technical and organisational measures, including encryption in transit, tenant-scoped access controls at the database level, hashed API keys, and least-privilege access for our systems. No system is perfectly secure, so please keep your credentials safe and revoke keys you no longer use.

8. Cookies and local storage

We use strictly necessary cookies and browser storage to keep you signed in and to maintain your session. We do not use advertising cookies. You can clear this storage in your browser settings, though doing so will sign you out.

9. Changes and contact

We may update this notice; material changes will be posted here with a new effective date. For privacy questions, contact Agent Relay Console through the support channel listed in your console.