Tomorrowland Beta, LLC ("Company," "we," "us," or "our") operates agentcard.sh (the "Site") and related services. This Privacy Policy describes how we collect, use, disclose, and protect your information when you use the Site and our services.

Information We Collect

Information you provide

  • Account information: name, email address, and password when you create an account
  • Payment information: billing details processed through Stripe. We do not store full credit card numbers on our servers
  • Card usage data: card names, labels, funding amounts, and transaction history associated with your virtual cards
  • Support communications: messages you send through our support chat or email

Slack integration data

If you install our Slack app or link your Slack account, we collect and store the following:

  • Workspace information: Slack workspace (team) ID and team name, collected when an admin installs the AgentCard Slack app
  • Bot token: an OAuth bot token issued by Slack, encrypted at rest, used to send messages (e.g., approval requests, transaction notifications) on behalf of the AgentCard bot
  • Slack user ID: your Slack user ID, linked to your AgentCard account when you connect the two via the account-linking flow

We do not read, store, or process the content of messages in your Slack channels or direct messages. The bot token is used solely to respond to slash commands you initiate and to deliver notifications you have opted into.

To remove Slack data, uninstall the AgentCard app from your Slack workspace. You can also contact us at support@agentcard.sh to request deletion of any stored Slack-related data.

Information collected automatically

  • Log data: IP address, browser type, operating system, referring URLs, pages visited, and timestamps
  • Device information: device type, unique device identifiers, and mobile network information
  • Usage data: how you interact with the Site and services, including API and MCP tool usage patterns
  • Cookies and similar technologies: we use cookies and similar tracking technologies to maintain sessions and improve our services

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Site and services
  • Process transactions and send related information (confirmations, receipts)
  • Create and manage your account
  • Send you technical notices, security alerts, and support messages
  • Respond to your comments, questions, and customer service requests
  • Monitor and analyze trends, usage, and activity to improve the Site
  • Detect, investigate, and prevent fraudulent transactions and other illegal activities
  • Comply with legal obligations

How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

  • Service providers: with third-party vendors who perform services on our behalf, including Stripe (payment processing), Mastercard (card network), and hosting providers. These providers are contractually obligated to protect your information
  • Legal compliance: when required by law, regulation, legal process, or governmental request
  • Protection of rights: to enforce our Terms of Use, protect our rights, privacy, safety, or property, or that of our users or the public
  • Business transfers: in connection with a merger, acquisition, or sale of all or a portion of our assets
  • With your consent: when you have given us explicit permission to share your information

Data Security

We take the security of your information seriously. Card credentials (PAN, CVV, expiry) are encrypted at rest using AES-256-GCM and are only decrypted when explicitly requested through authenticated MCP tools. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We may also retain information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. When a card is closed, transaction data may be retained for compliance purposes for a period required by applicable law.

Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Access: request a copy of the personal information we hold about you
  • Correction: request that we correct inaccurate or incomplete information
  • Deletion: request that we delete your personal information, subject to certain exceptions
  • Portability: request a copy of your data in a structured, machine-readable format
  • Opt-out: unsubscribe from marketing communications at any time

To exercise any of these rights, contact us at support@agentcard.sh.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information.

Cookies

We use cookies and similar technologies for session management and analytics. You can control cookies through your browser settings. Disabling cookies may affect the functionality of certain parts of the Site.

We use the following types of cookies:

  • Essential cookies: required for the Site to function (authentication, security)
  • Analytics cookies: help us understand how visitors interact with the Site

Third-Party Analytics

We use third-party analytics services (including Ahrefs Analytics and PostHog) to help understand usage of the Site. These services may collect information about your use of the Site and other websites. The information collected is used to analyze and improve the Site.

Children's Privacy

The Site and services are not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

International Data Transfers

Your information may be transferred to and maintained on servers located outside your jurisdiction. By using the Site, you consent to the transfer of your information to the United States and other jurisdictions where we or our service providers operate.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Site after any changes constitutes acceptance of the revised policy.

Contact

If you have questions about this Privacy Policy, contact us at:

Tomorrowland Beta, LLC
Attn: Karina Serfaty
2844 Lyon St, Apt 204
San Francisco, CA 94123
support@agentcard.sh