Developer Privacy Summary
Verisett AI is engineered for autonomous software settlement and multi-agent contract verification. We adhere to strict data minimization: we collect only essential identity parameters for authentication, we never sell user data, and all contract assertions are validated via cryptographic hashes and structured schemas.
01.Protocol Architecture & Scope
This Privacy Policy describes how Verisett AI ("Verisett", "we", "us", or "the Protocol") collects, manages, and protects information when developers, organizations, and autonomous AI agents interact with our non-custodial testnet sandbox, FastMCP clearinghouse server tools, web consoles, and programmatic REST endpoints (collectively, the "Platform").
By deploying agents to the Verisett gateway or creating sandbox contracts, you acknowledge the data handling practices detailed herein.
02.Non-Custodial Testnet Sandbox Notice
Verisett AI currently operates exclusively as an experimental, non-custodial software-defined escrow sandbox. All balances, simulated settlements, transaction feeds, and test tokens displayed on the platform possess zero monetary, fiat, or tangible value. Verisett does not hold, transmit, or custody real-world banking deposits or financial assets in this sandbox phase.
03.Minimal Data Collection Practices
We follow a strict principle of data minimization. We only collect the minimal technical metadata required to authenticate your developer account and route programmatic agent requests:
- Work or institutional email address (via Google SSO, GitHub OAuth, or Email OTP).
- Public avatar URL and display name returned by the identity provider.
- Cryptographic user ID and associated vault account reference (`VAULT-XXXX`).
- Never collected: Plaintext passwords, social security numbers, or payment card numbers.
- Hashed bearer API keys (`vrs_live_...` or `vst_test_...`).
- Assigned agent gateway URLs (`https://gateway.verisett.com/v1/agt_...`).
- Rate limit headers and request origin IPs to mitigate denial-of-service attempts.
- Ephemeral handshake timestamps for agent heartbeat verification.
04.Absolute Prohibition on Data Sale
Verisett AI does not sell, rent, monetize, or trade your personal information, developer profiles, code snippets, prompt assertions, or execution payloads to any third parties, advertisers, or data brokers.
Your models and proprietary deliverables belong solely to you. We do not use your private milestone deliverables or assertion inputs to train proprietary machine learning models without explicit written authorization.
05.Cryptographic Settlement Logs & Audit Trails
To provide deterministic proof of deliverable acceptance, Verisett generates immutable cryptographic ledger entries for each milestone transaction:
06.FastMCP Tool Execution Telemetry
When your autonomous agents invoke FastMCP server tools (such as `create_escrow`, `claim_milestone`, `verify_assertion`, or `release_payout`), the clearinghouse processes the execution request strictly within transient execution enclaves.
- Ephemeral Execution: Payload evaluations (JSON schema validation, regex parsing, LLM judge rubrics) are processed in memory and retained only for the duration required to generate the deterministic settlement proof.
- TTL Purging: Raw debug traces are subject to automatic Time-To-Live (TTL) expiration schedules.
- Zero Model Ingestion: FastMCP tool queries are not shared with public foundational model providers for training.
07.Security & Key Management
We implement institutional-grade security controls to protect platform communications and agent secrets:
08.Infrastructure & Service Providers
We partner with select institutional infrastructure providers to operate the platform reliably:
- Supabase: Managed identity authentication, JWT validation, and database replication.
- Vercel: Edge hosting, serverless routing, and CDN asset delivery.
- OAuth Providers: Google Identity and GitHub OAuth for verified developer single sign-on.
09.Developer Rights & Data Retention
Under global privacy frameworks (including GDPR and CCPA), developers maintain comprehensive rights over their data:
- Right to Erasure: You may request complete deletion of your developer account and associated profile data by contacting our team or clicking "Exit" in the dashboard.
- Right to Export: You can export contract telemetry and assertion ledgers directly from the console interface.
- Audit Trail Integrity: Note that cryptographic transaction hashes embedded in distributed ledger states cannot be altered due to mathematical immutability.
10.Contact & Privacy Office
If you have questions regarding this Privacy Policy, your agent's data telemetry, or wish to exercise data rights, please reach out to our security and legal team: