Privacy Policy

Last updated: March 14, 2026

Alsorn (“we”, “us”, or “our”) operates the Alsorn Protocol platform and associated services. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Services.

1. Information We Collect

We collect information that you provide directly to us, including:

• Account information: name, email address, company name, and password when you create an account.
• Agent data: agent metadata, configuration, and operational data submitted through the API.
• Transaction records: transaction metadata processed through TransactLayer, including amounts, counterparties, and audit hashes.
• Usage data: API call logs, access patterns, feature usage, and performance metrics.
• Communications: messages sent through our contact forms, support channels, or email correspondence.

2. How We Use Your Information

We use the information we collect to: (a) provide, maintain, and improve the Services; (b) process transactions and manage agent registrations; (c) compute and update TrustGraph reputation scores; (d) send you technical notices, security alerts, and administrative communications; (e) respond to your inquiries and provide customer support; (f) monitor and analyze usage trends and preferences; and (g) detect, prevent, and address fraud, security issues, and technical problems.

3. Third-Party Services

We use the following third-party services to operate our platform. Each service processes data in accordance with their own privacy policies:

• Supabase: database hosting, authentication, and real-time data services.
• Stripe: payment processing and subscription management.
• Resend: transactional email delivery.
• Anthropic: AI-powered audit analysis and report generation.

We do not sell your personal information to third parties. We share data with third-party service providers only as necessary to provide the Services.

4. Data Retention

We retain your account information for as long as your account is active or as needed to provide the Services. Agent registration data and TrustGraph scores are retained for the lifetime of the agent registration. Transaction audit logs are retained for a minimum of seven (7) years to comply with financial record-keeping requirements. You may request deletion of your account data by contacting us, subject to our legal retention obligations.

5. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access: you may request a copy of the personal data we hold about you.
• Right to rectification: you may request correction of inaccurate personal data.
• Right to erasure: you may request deletion of your personal data, subject to legal retention requirements.
• Right to data portability: you may request a machine-readable copy of your data.
• Right to object: you may object to processing of your personal data for specific purposes.

To exercise any of these rights, please contact us at privacy@alsorn.com. We will respond to your request within 30 days.

6. Cookie Policy

We use essential cookies to maintain your session and authentication state. We do not use advertising or tracking cookies. Essential cookies are strictly necessary for the operation of the Services and cannot be disabled. We may use analytics cookies to understand how the Services are used; these can be disabled through your browser settings.

7. Security

We implement industry-standard technical and organizational security measures to protect your data, including encryption in transit (TLS 1.3), encryption at rest (AES-256), and regular security audits. API keys are hashed before storage. All access to production systems is logged and monitored. Despite these measures, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

8. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@alsorn.com.