How we handle data across AgentPay, AgentWorld, Gibbr, SolvScore and Emergency SOS. Last reviewed 1 September 2026.
Where we stand on certifications, stated plainly: we are not SOC 2 or ISO 27001 certified, and we do not claim to be. We are a small team. If your procurement process needs a completed security questionnaire, email us and you will get one back filled in honestly — including the gaps.
| Product | Data involved |
|---|---|
| Gibbr | Messages you send for translation, room membership, display name, optional profile photo, and language settings. Voice input is transcribed to text to be translated. |
| Emergency SOS | Location, message text, device identifier and battery level at the moment an alert is raised, plus the responding organisation's contact details. This is the most sensitive data we hold and is treated accordingly. |
| AgentPay / AgentWorld / SolvScore | Wallet addresses, payment transaction hashes and API usage records. These are pseudonymous and, for on-chain payments, already public on Base. |
| Email contact | Address and message content when you email us, sign up for a newsletter, or enter a contest. |
We keep operational data only as long as the feature it powers requires. Emergency SOS events are retained as the incident record of the organisation that received them. You can ask us to delete data associated with you or your organisation at any time by emailing the address below; we will action it within 30 days and confirm when it is done.
We use first-party, cookieless analytics on our own domains. No advertising networks, no third-party tracking cookies, and no selling or renting of personal data to anyone, ever.
Card payments are processed by Stripe. We never see or store full card numbers. Crypto payments settle in USDC on Base and are verified on-chain; a payment either verifies against the chain or it is refused.
| Provider | Purpose |
|---|---|
| Contabo | Virtual servers running our applications and databases, in United States data centres |
| Base44 | Agent platform and hosted application data |
| Stripe | Card payment processing |
| Coinbase (CDP) | Settling USDC payments on Base |
| Base (Ethereum L2) | Public settlement of on-chain payments |
If you find a security problem, tell us and we will not argue with you about it. Email support@x402-agent-pay.com with enough detail to reproduce it. We aim to acknowledge within two business days. Please give us a reasonable chance to fix an issue before publishing it, and we will credit you if you would like the credit.
If we discover a breach affecting your data, we will notify affected organisations and individuals without undue delay and within 72 hours of confirming it, describing what happened, what data was involved and what we are doing about it.
Send them to support@x402-agent-pay.com. Straight answers, and where the answer is "we don't do that yet", you will get that instead of a marketing paragraph.