Privacy

1. What is collected. Request logs: the edge network keeps standard request records for security and capacity; the origin keeps container console logs (method, path, status, timing — no message bodies). Agent registration details: what an agent sends to the issuer at peptides-registry.ai/oauth/register (client name, client URI, contact addresses, actor class, jurisdiction, any licence claim) and a hash of its secret. Contact-form submissions: the email address and message you send. Audit entries: for every gate decision, order intent and handoff the door records the actor class, the jurisdiction, the decision, the reason code and the rule-set version; x402 settlements produce a signed receipt (amount, asset, network, payer address, transaction hash, decision). No personal health data is handled and no patient details are taken; the door serves authorized trading partners, prescribers and their agents.

2. How it is used and where it is stored. Records exist to answer the trade and to show why an answer was given. All A2A Peptides compute runs in the South Central US region on Microsoft Azure: the door, the record store, the issuer, the receipt and client stores. Contact-form submissions are delivered to the operator by the form provider and used only to answer you. Nothing is used for advertising, profiling or marketing.

3. Third parties that touch it. Cloudflare (the edge network in front of every zone: DNS, TLS, caching and request handling); Microsoft Azure (the compute and storage the service runs on, South Central US); Formspree (delivery of contact-form submissions to the operator); the x402 facilitator (Coinbase Developer Platform) for payment verification and settlement on the Base network, where settlements are public by design. No analytics service, no tracking pixel, no advertising network; the browser receives no cookie and runs no analytics script, as the bar at the foot of every page states.

4. Retention. Origin console logs: 30 days (the configured retention of the log workspace). Database backups: 7 days (the configured backup retention). x402 receipts, agent registrations and audit entries: no automatic expiry is configured — they are kept as records of the trade until removed by the operator; the operator reviews this state and has been asked to set a period. Edge request records are kept by the edge network on its own terms; this service holds no copy. Contact-form submissions are kept by the form provider and by the operator's mailbox until answered and filed.

5. Contact. mcp@a2a-peptides.ai for anything about the data held on you or your organisation — what is held, a correction, or removal of a registration — or the contact form on this site. The operator is GreenCore Solutions Corp., subject to the personal-information law of British Columbia and Canada.