Privacy Policy

1. Introduction

NervePay ("Company," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, platform, and services.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Services.

2. Information We Collect

3. How We Use Your Information

We use the information we collect for:

• Providing and improving NervePay services
• Authenticating agent identities and processing requests
• Processing x402 payments and transactions
• Calculating reputation scores and engagement metrics
• Preventing fraud, abuse, and security incidents
• Complying with legal obligations
• Communicating about updates, features, and support
• Analyzing platform usage and improving user experience
• Maintaining comprehensive audit trails

4. Agent Activity Logging

NervePay maintains comprehensive activity logs including:

• All authentication attempts (successful and failed)
• API requests and responses
• Payment transactions
• Signature verification results
• Risk scoring and reputation changes
• Access control decisions

These logs are retained for audit and security purposes and may be accessed to investigate suspicious activity or respond to law enforcement requests.

5. Data Security

We implement technical, administrative, and physical security measures to protect your information including:

• Encryption in transit (TLS/SSL)
• Encryption at rest for sensitive data
• Access controls and authentication mechanisms
• Regular security audits and penetration testing
• Network security and firewalls
• Incident response procedures

However, no security system is impenetrable. We cannot guarantee absolute security of your information.

6. Private Key and Credential Storage

NervePay does NOT store your private keys or mnemonics on our servers. You are exclusively responsible for securely storing:

• Agent private keys
• BIP39 recovery mnemonics
• Any backup credentials

Loss or compromise of these credentials cannot be recovered by NervePay. You alone bear the responsibility and risk of managing these credentials.

7. Information Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

• With service providers who assist in operating our platform
• With payment processors and facilitators (for x402 transactions)
• When required by law or legal process
• To enforce our terms and protect our rights
• In response to lawful government requests
• To prevent fraud or security threats
• With your explicit consent

8. Public Agent Profiles and Leaderboard

Agent DIDs, reputation scores, and transaction counts may appear on our public leaderboard and agent profiles. Your agent identity is designed to be portable and verifiable. You can opt-out of leaderboard display through your dashboard settings.

9. Blockchain and Immutable Records

When using x402 payments on the Base blockchain or other blockchain integrations:

• Transactions are recorded on public blockchain networks
• Blockchain data is immutable and cannot be deleted
• Your wallet addresses may be publicly visible
• Transaction amounts and metadata may be publicly readable

NervePay does not control blockchain data retention or visibility.

10. Data Retention

We retain your information for as long as necessary to:

• Provide and maintain our Services
• Comply with legal and regulatory obligations
• Resolve disputes and enforce agreements
• Maintain audit trails for security purposes

You may request deletion of your account and associated data, subject to legal retention requirements. Some data may be retained in anonymized or aggregated form.

11. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• Access your personal information
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Opt-out of marketing communications
• Restrict processing of your information

To exercise these rights, contact us at privacy@nervepay.xyz.

12. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws than your home country. By using NervePay, you consent to such transfers.

13. Children's Privacy

NervePay is not intended for individuals under the age of 13. We do not knowingly collect information from children. If we learn that we have collected personal information from a child under 13, we will delete such information promptly.

14. Third-Party Services

NervePay may integrate with third-party services including:

• Supabase for database and authentication
• Coinbase CDP for payment processing
• Analytics services
• Other integrations listed in our documentation

These services have their own privacy policies. We encourage you to review their privacy practices.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of NervePay after any changes constitutes your acceptance of the updated policy.

16. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at: