What we store. What we don't.

We store the minimum we need to make the canvas work: your email, your tile metadata, and the read events agents send our way. We never sell either side of that.

Account data

When you sign in we record an email, a display name, and (if you sign up with a password) a bcrypt hash. We never see your plaintext password.

Tile data

Tile metadata (display name, endpoint, category, price, description, tags) is public — that's the point. Every agent that reads the canvas sees it.

Read events

We record every agent read: the tile, the agent's User-Agent / X-Agent string, the payer wallet address (if any), the path, the price, and the time. Used to credit the tile owner and to render the live activity ticker.

Payments

Stripe handles card data for tile claims and subscriptions; we never see the card. x402 settlements are USDC on Base — anyone can verify them on-chain.

Deletion

Email 0p@agentmail.to to delete your account. Your tiles retire and the cluster returns to the available pool; the historical read log is anonymized within 30 days.