Privacy Policy
Effective date: May 12, 2026
AgentXchange is operated by Yorkshire AI
This Privacy Policy explains how AgentXchange ("we," "us," or "our"), operated by Yorkshire AI, collects, uses, shares, and protects your personal information when you use our website at agentxchange.app and related services (collectively, the "Service"). By using the Service, you agree to the practices described in this policy.
1. Data We Collect
Account Information
When you create an account, we collect your name, email address, and profile information provided through your authentication provider (such as Google). If you register as a publisher, we may also collect your organisation name and contact details.
Usage Data
We automatically collect information about how you interact with the Service, including pages visited, agents browsed and installed, search queries, timestamps, browser type, operating system, IP address, and referring URLs. This data helps us improve the Service and understand usage patterns.
Payment Data
If you subscribe to a paid plan or purchase an agent, payment processing is handled by Stripe. We do not store your full credit card number, CVV, or bank account details. We receive limited information from Stripe such as the last four digits of your card, card brand, billing address, and transaction history.
Publisher Data
If you publish agents on AgentXchange, we collect the source code, metadata, and documentation you submit. This data is processed through our security scanning pipeline and stored as part of your listing.
2. How We Use Your Data
Provide the Service: To operate your account, process transactions, display listings, and enable agent installations.
Security Scanning: To run our 9-point security check and external scanner pipeline against submitted agent code to generate trust scores and protect users.
Analytics: To understand how users interact with the Service, identify trends, measure performance, and improve the user experience.
Communications: To send you transactional emails (account confirmation, purchase receipts, security alerts) and, with your consent, marketing communications.
Safety and Compliance: To detect and prevent fraud, abuse, and security incidents, and to comply with legal obligations.
3. Third-Party Services
We share data with the following third-party providers only as necessary to operate the Service:
Stripe
Payment processing. Stripe receives your payment details directly and is PCI DSS compliant. See Stripe's Privacy Policy.
Authentication via Google OAuth. We receive your name, email, and profile image. See Google's Privacy Policy.
Google Cloud Platform
Infrastructure and hosting. Your data is stored on GCP servers. See GCP's Privacy Policy.
We do not sell your personal data to third parties. We do not share your data with advertisers.
4. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or anonymise your personal data within 90 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes (such as fraud prevention or dispute resolution).
Usage data and analytics may be retained in aggregate, non-identifiable form indefinitely to improve the Service.
5. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
Access: Request a copy of the personal data we hold about you.
Correction: Request that we correct inaccurate or incomplete data.
Deletion: Request that we delete your personal data, subject to legal retention requirements.
Portability: Request your data in a structured, machine-readable format.
Objection: Object to data processing based on legitimate interests.
To exercise any of these rights, contact us at privacy@agentxchange.app. We will respond within 30 days.
6. Cookies
We use cookies and similar technologies for the following purposes:
Session Cookies
Essential for maintaining your login state and navigating the Service. These expire when you close your browser or after your session ends.
Authentication Cookies
Used to remember your authentication status so you do not need to log in on every visit. These persist for up to 30 days.
We do not use third-party tracking or advertising cookies.
7. Data Security
We implement industry-standard technical and organisational measures to protect your data, including encryption in transit (TLS), encryption at rest, access controls, and regular security audits. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a prominent notice on the Service before the changes take effect. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.
Questions about privacy?
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us.
privacy@agentxchange.app