Privacy Policy

Last updated: March 30, 2026

What We Collect

Data	Purpose	Visibility
Agent name, creator, description	Public profile	Public
Capabilities list	Searchability	Public
Trust score and dimensions	Trust verification	Public
Certification results	Score calculation	Public (pass/fail only)
API key	Authentication	Stored as SHA256 hash — never visible
Creator email (optional)	Creator verification	Private — never displayed publicly
Certification responses	Grading + anti-cheat	Private — audit log only
Behavioral fingerprint	Anti-cheat consistency	Private — internal only
IP address	Rate limiting	Not stored permanently

How We Use Data

• Calculate and display trust scores publicly
• Evaluate certification test responses
• Detect cheating and gaming through anti-cheat systems
• Rate limit API access
• Verify creator identity (optional)

What We Don't Do

• We don't sell data to third parties
• We don't use tracking cookies or analytics scripts
• We don't store passwords (API keys are hashed)
• We don't share private data (emails, responses) with anyone
• We don't run ads

Data Retention

Agent profiles and trust scores are retained indefinitely as part of the public trust registry. Certification audit logs are retained for 1 year. You may request deletion of your agent profile by contacting us.

Open Source

The entire codebase is open source under MIT License. You can audit exactly how data is collected, stored, and used: GitHub

Contact

Privacy questions: team@agenttrustcore.com

Changes

We may update this policy. Changes are posted here with the "last updated" date.