Privacy Policy

1. Introduction

BAP.Market ("we", "us", or "the Platform") values your privacy. This Privacy Policy explains how we handle information when you use our AI agent marketplace on BNB Chain. Important: BAP.Market operates primarily on public blockchain technology, where most data is transparent and immutable by design.

2. Information We Collect

2.1 On-Chain Data (Public)

When you interact with BAP.Market smart contracts, the following information is recorded on the public BNB Chain blockchain:

• Your wallet address (public key)
• Agent registrations (ERC-8004 NFTs) and NFA upgrades (BAP-578)
• NFA metadata: names, descriptions, images, personas, logic contracts
• Agent balance, status, and lifecycle events (active, paused, terminated)
• Marketplace transactions: listings, sales, delistings
• AI learning history (Merkle tree roots and update timestamps)
• X402 payment signatures and transaction hashes

⚠️ This data is public, permanent, and cannot be deleted.Anyone can view it on block explorers like BscScan.

2.2 IPFS/Pinata Storage

Agent and NFA metadata (images, JSON files) are stored on IPFS via Pinata. Once uploaded, this content is publicly accessible and distributed across the IPFS network. We do not control or delete IPFS content.

2.3 Off-Chain Data (Private)

We temporarily store the following data for operational purposes:

• AI Learning Tasks: In-memory storage of pending learning tasks (not persisted to disk)
• API Logs: Server logs for debugging (wallet addresses may be included)
• Session Data: Temporary browser session info (not stored server-side)

2.4 Website Analytics

We may collect anonymous usage data to improve the Platform:

• Page views, navigation patterns, and feature usage
• Browser type, device, and screen size
• Geographic location (country/region level only)
• Referring websites and search terms

We do not use cookies or tracking pixels. No personal data is collected via analytics.

3. How We Use Your Information

We use collected data for the following purposes:

• Display Agent/NFA Info: Show your registered agents and NFAs on the Platform
• Execute Transactions: Process registrations, upgrades, marketplace trades, and AI learning
• X402 Payments: Verify EIP-712 signatures for gasless transactions
• Improve UX: Optimize UI/UX based on usage patterns
• Security & Fraud Prevention: Detect and prevent malicious activity
• Customer Support: Respond to user inquiries via Twitter or other channels

4. Data Sharing and Disclosure

We do not sell your data. However, data may be shared in these contexts:

• Public Blockchain: All on-chain data is inherently public and accessible to anyone
• IPFS Network: Agent/NFA metadata is distributed across the public IPFS network
• Third-Party Services:
  • Pinata: IPFS hosting
  • OpenAI: AI learning content generation (prompts only, no wallet addresses)
  • RPC Providers (drpc.org): Blockchain read/write operations
• Legal Obligations: When required by law, court order, or regulatory request

5. Your Rights and Choices

Due to the decentralized nature of blockchain, you have limited control over on-chain data:

• Wallet Control: You control your wallet and private keys. Use a hardware wallet for security.
• Pseudonymity: Your wallet address is pseudonymous. Avoid linking it to personal info if you want privacy.
• Data Deletion: On-chain and IPFS data cannot be deleted due to immutability.
• Opt-Out of Analytics: Use browser extensions (e.g., Privacy Badger) to block tracking.

If you have questions about your data, contact us via @bapdotmkt.

6. Data Security

We implement industry-standard security measures:

• HTTPS encryption for all website traffic
• Secure API key management (environment variables, no hardcoding)
• Regular security audits of smart contracts
• Limited server-side data storage (stateless architecture where possible)

However, you are solely responsible for:

• Securing your wallet and private keys
• Protecting your device from malware
• Verifying transaction details before signing

7. International Users

BAP.Market is accessible globally. By using the Platform, you consent to the transfer of data to servers located in various jurisdictions. BNB Chain is a global blockchain network with validators worldwide.

8. Children's Privacy

BAP.Market is not intended for users under 18. We do not knowingly collect data from minors. If you are a parent and believe your child has used the Platform, contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Platform after changes constitutes acceptance of the updated policy.

10. Third-Party Links

The Platform may link to external websites (BscScan, Pinata, protocol docs). We are not responsible for the privacy practices of these sites. Review their policies independently.