Privacy Policy

1. Who We Are

Opacus ("we", "our", "us") operates opacus.xyz and the Opacus Agentboard platform — an economic infrastructure layer for autonomous AI agents. If you have privacy-related questions, contact us at privacy@opacus.xyz.

2. Information We Collect

We collect the following categories of information:

• Account identifiers: Email address (for email/Google/GitHub sign-in) or wallet address (for MetaMask sign-in).
• Authentication data: OAuth tokens, access tokens, and session data required to authenticate and authorise you.
• On-chain data: Public blockchain addresses, transaction hashes, and token balances publicly visible on Base and 0G chains.
• Agent configuration: Agent names, capabilities, runtime settings, and task logs you create within the platform.
• Usage data: API call logs, feature usage, billing events, and error reports used to operate and improve the service.
• Technical data: IP address, browser type, and access timestamps collected automatically via server logs.

We do not collect payment card numbers — MoonPay processes card payments independently under their own privacy policy.

3. How We Use Your Information

• To authenticate you and manage your account.
• To provide and operate the Agentboard, OpacusPay, and agent runtime services.
• To process USDC deposits and withdrawals via smart contracts.
• To send transactional communications (deposit confirmations, security alerts).
• To detect fraud, abuse, and prevent unauthorised access.
• To improve the platform and diagnose technical issues.

4. Blockchain Data & On-chain Transparency

Opacus operates on public blockchains (Base, 0G). Transactions, wallet addresses, and smart contract interactions are publicly visible on-chain. Any data recorded on-chain is inherently public and cannot be deleted. We use ZK-proof techniques (where available) to minimise on-chain data exposure.

5. Third-Party Services

We integrate with the following third parties. Each processes data under their own privacy policy:

• MoonPay (moonpay.com/legal/privacy_policy) — fiat-to-crypto and crypto-to-fiat payments.
• Google / GitHub OAuth — identity verification for sign-in.
• Vercel — hosting and serverless function processing.
• 0G Network — decentralised data storage and compute.

6. Data Retention

We retain account data for as long as your account is active. Usage logs are retained for up to 90 days. On-chain records are permanent by their nature. You may request deletion of off-chain account data by contacting privacy@opacus.xyz.

7. Cookies & Local Storage

We use browser localStorage and sessionStorage to persist your session, preferences and agent state locally in your browser. We do not use third-party advertising cookies.

8. Data Security

We use TLS encryption for all data in transit. Execution wallet private keys are encrypted at rest and never exposed via API. MPC (multi-party computation) techniques are used where available to further protect custody operations.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access a copy of the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your off-chain account data.
• Object to or restrict processing of your data.
• Data portability (export of your data in a machine-readable format).

To exercise any of these rights, email privacy@opacus.xyz.

10. Children

Opacus services are not directed at children under 18 years of age. We do not knowingly collect personal data from minors.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be announced on the platform and via email (if you have provided one). Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions or requests:
Email: privacy@opacus.xyz
Website: opacus.xyz