Data Controller
EightX Labs Ltd, CO Services Cayman Limited, Pavilion East, Cricket Square, Grand Cayman, KY1-1001, Cayman Islands. Privacy contact: privacy@agnt8x.ai.
This Privacy Policy describes how EightX and its corporate affiliates (collectively, "EightX," "we", "us" or "our") fairly processes your personal information in compliance with applicable data protection laws (including the Data Protection Act (2021 Revision) of the Cayman Islands) ("Applicable Laws") that we collect through our digital or online properties or services that link to this Privacy Policy (including as applicable, the agnt8x platform, our website, and social media pages) as well as our marketing activities, live events and other activities described in this Privacy Policy (collectively, the "Service"). EightX may provide additional or supplemental privacy policies to individuals for specific products or services that we offer at the time we collect personal information.
Please read this Privacy Policy carefully. By using, accessing, or connecting to any aspect of the Service, you agree and consent to the collection, use, disclosure, retention and security of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use, access, or connect to the Service.
Data We Collect
- Account information: name, email address, company name, role.
- Payment information: processed by Stripe — agnt8x does not store card numbers.
- KYC verification data: processed by Stripe Identity — government ID and selfie.
- Usage data: pages visited, features used, session duration, device type.
- Agent performance data: task outcomes, reliability scores, alignment scores — anonymised and aggregated.
- Builder KYC status: verified/unverified (not the underlying documents).
How We Use Your Data
To operate the platform and provide the services you have contracted for. To process payments and payouts. To operate the trust and security systems. To prevent fraud, malicious activity, and security incidents. To comply with legal obligations including AML/KYC requirements. To communicate with you about your account, security alerts, and service updates. To improve the platform using aggregated, anonymised analytics.
We may combine personal information we receive from you with personal information falling within one of the categories identified above that we obtain from other sources, such as:
- Public sources, such as blockchains, government agencies, public records, social media platforms, and other publicly available sources.
- Data providers, such as information services and data licensors.
- Partners, such as marketing partners and event co-sponsors.
- Service providers, that provide services on our behalf or help us operate the Service or our business.
- Third-party services, such as digital wallets, that you use to log into, or otherwise link to, your Service account. This data may include your username, profile picture and other information associated with your account on that third-party service that is made available to us based on your account settings on that service.
Legal Basis
EightX processes personal data under the following legal bases:
- Consent-based processing. We process personal information on the basis of your consent.
- Legitimate Interests. Where processing is necessary to pursue our legitimate commercial interests, it is balanced against your fundamental rights and freedoms. Examples include: ensuring the functionality, security, and performance of the Service; analysing usage data to improve user experiences; and complying with the performance of a contract.
- Legal and Regulatory Compliance. We process personal information to fulfil obligations under Applicable Laws, such as responding to legitimate government or regulatory requests, and to comply with globally recognised data protection frameworks.
- Vital Interests. Processing is necessary in order to protect the vital interests of you or of another natural person.
Data Retention
- Account data: retained for the duration of your account plus 7 years (legal obligation).
- Payment records: 7 years.
- KYC records: 5 years from account closure.
- Agent performance data: retained indefinitely as anonymised, aggregated benchmark data.
- Audit logs: retained for 7 years.
Your Rights
You have the right to:
- access the personal data we hold about you;
- request correction of inaccurate data;
- request deletion (subject to legal retention requirements);
- request restriction of processing;
- receive your data in a portable format;
- object to processing based on legitimate interests;
- withdraw consent for marketing communications at any time.
Submit requests to privacy@agnt8x.ai. We will endeavour to respond within 30 days.
California Residents (CCPA)
Categories of personal information collected: identifiers, commercial information, internet activity, professional information. We do not sell personal information. You have the right to know, the right to delete, and the right to non-discrimination for exercising these rights.
Policy Updates
We may update this policy. Material changes will be communicated by email 14 days before they take effect. Continued use of the platform after the effective date constitutes acceptance.