Tomorrowland Beta, LLC (“Company,” “we,” “us,” or “our”) operates agentcard.sh (the “Site”) and related services. This Privacy Policy describes how we collect, use, disclose, and protect your information when you use the Site and our services.

## Information We Collect

### Information you provide

- **Account information:** name, email address, and password when you create an account
- **Payment information:** billing details processed through Stripe. We do not store full credit card numbers on our servers
- **Card usage data:** card names, labels, funding amounts, and transaction history associated with your virtual cards
- **Support communications:** messages you send through our support chat or email

### Slack integration data

If you install our Slack app or link your Slack account, we collect and store the following:

- **Workspace information:** Slack workspace (team) ID and team name
- **Bot token:** an OAuth bot token issued by Slack, encrypted at rest
- **Slack user ID:** your Slack user ID, linked to your AgentCard account

We do **not** read, store, or process the content of messages in your Slack channels or direct messages.

To remove Slack data, uninstall the AgentCard app from your Slack workspace. You can also contact us at [support@agentcard.sh](mailto:support@agentcard.sh) to request deletion.

### Information collected automatically

- **Log data:** IP address, browser type, operating system, referring URLs, pages visited, and timestamps
- **Device information:** device type, unique device identifiers, and mobile network information
- **Usage data:** how you interact with the Site and services, including API and MCP tool usage patterns
- **Cookies and similar technologies:** we use cookies and similar tracking technologies to maintain sessions and improve our services

## How We Use Your Information

We use the information we collect to:

- Provide, maintain, and improve the Site and services
- Process transactions and send related information
- Create and manage your account
- Send you technical notices, security alerts, and support messages
- Respond to your comments, questions, and customer service requests
- Monitor and analyze trends, usage, and activity
- Detect, investigate, and prevent fraudulent transactions
- Comply with legal obligations

## How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

- **Service providers:** with third-party vendors including Stripe, Mastercard, and hosting providers
- **Legal compliance:** when required by law or governmental request
- **Protection of rights:** to enforce our Terms of Use and protect rights and safety
- **Business transfers:** in connection with a merger, acquisition, or sale
- **With your consent:** when you have given us explicit permission

## Data Security

Card credentials (PAN, CVV, expiry) are encrypted at rest using AES-256-GCM and are only decrypted when explicitly requested through authenticated MCP tools. No method of transmission is completely secure, but we implement appropriate technical and organizational measures.

## Data Retention

We retain your personal information for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce our agreements.

## Your Rights and Choices

Depending on your jurisdiction, you may have rights to access, correct, delete, or port your data. Contact us at [support@agentcard.sh](mailto:support@agentcard.sh).

## California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the CCPA. We do not sell personal information.

## Cookies

We use essential cookies (authentication, security) and analytics cookies. You can control cookies through your browser settings.

## Third-Party Analytics

We use Ahrefs Analytics and PostHog to help understand usage of the Site.

## Children's Privacy

The Site is not intended for use by anyone under 18. We do not knowingly collect personal information from children under 18.

## International Data Transfers

Your information may be transferred to servers located outside your jurisdiction. By using the Site, you consent to the transfer of your information to the United States.

## Changes to This Policy

We may update this Privacy Policy from time to time. Continued use constitutes acceptance.

## Contact

Tomorrowland Beta, LLC  
Attn: Karina Serfaty  
2844 Lyon St, Apt 204  
San Francisco, CA 94123  
[support@agentcard.sh](mailto:support@agentcard.sh)
