CRA AGENT
This policy explains what CRA AGENT (“we”) records when you use cra-agent.tech, the API at api.cra-agent.tech or our x402 facilitator, what we publish, and who else sees it. We record little: there are no accounts, no cookies and no analytics.
What we record
Payments
When one of our paid routes verifies a payment, we record when it happened, the network, the paying and the receiving address, the amount, the route (its path, without the parameters), how it ended (settled, not charged or failed) and its transaction. This record is public at cra-agent.tech/status and api.cra-agent.tech/v1/settlements, with payer addresses shortened. The payment itself is public on its blockchain anyway; what we add is the route and how the call ended.
Sellers on our facilitator
A seller that registers to use our facilitator gives us its payout address and a signed message, and we keep both. Anyone can check whether an address is registered. For the payments the facilitator settles we keep the same kind of record as above, and for Lightning payments the payment hash, the receiving node and the amount.
Names next to addresses
To tell our own payments from everyone else's, and to show who is behind an address when that is already public, we match addresses against public sources: the ERC-8004 agent registry on Arc, Circle's x402 catalogue and the sellers listed on our market.
What you send in a request
A request carries parameters: an address, a URL, a domain, a package name, a Wikipedia title, a task for the thinking agent. We use them to answer and pass them to the source that has the answer, listed below. We do not store them. Our web server keeps no access logs, and our application logs record events, such as a source that did not answer or the path of a request that failed, never the query of a request or your IP address.
The thinking agent
The task you send to /v1/upto/think goes to the model and search services the agent pays to answer it, today BlockRun and Exa. We do not store your task or the answer; we log how the run ended, how long it took and what it spent. The runs shown on cra-agent.tech/think are ones we start ourselves, with questions we write.
Our market
If you list an API on our market, its URL, name, description, price, networks and payout address are public.
If you write to us, we keep your message and your address to reply. Our email is hosted by Google.
The website
cra-agent.tech sets no cookies and runs no analytics or trackers. It is hosted by Netlify, which processes your IP address to serve the pages. The pages load fonts from Google Fonts, so your browser also connects to Google. Some pages read data from our API. On pages that use a browser wallet, the signing happens in your wallet; we only receive the signed payment or message.
Who else sees data
- Blockchains: payments on Arc, Base and Solana are public.
- Circle, whose Gateway settles payments on Arc, and Coinbase, whose facilitator settles payments on Base and Solana and lists our routes in its x402 catalogue.
- The sources that answer a request: Arc's RPC providers, Wikipedia, npm, PyPI, OSV, Google Public DNS, RDAP servers, Frankfurter for the ECB rates and, for the
/webroutes, the site you ask about. They see our server, not you. - BlockRun and Exa, for tasks sent to the thinking agent.
- Contabo, in Germany, which hosts our server; Netlify, which hosts the website; Google, for fonts and email.
Some of these companies are in the United States and handle data under their own privacy terms.
Why we use it
To provide the service you ask and pay for; to keep it working, safe from abuse and honest about its payments, which is why the payment record is public (our legitimate interest); and to answer you when you write.
How long we keep it
- Payment records and facilitator registrations: as long as the service runs, since the public record is part of it.
- Application logs: until they rotate out.
- Email: as long as the conversation needs.
Your rights
Depending on where you live, including in the EU and the UK, you can ask us for a copy of the data we hold about you, and ask us to correct it, delete it, limit how we use it or stop using it. Write to craagentarc@gmail.com. We cannot change or delete what is on a blockchain, but we can remove our own record of a payment from our ledger and our pages, unless we need to keep it to meet a legal obligation or to defend a claim. You can also complain to the data protection authority where you live.
Children
The service is not meant for children under 16.
Changes
When what we record changes, we update this page, and the date at the top says when.