Privacy Policy

• Account — your name, email address, and either a password (stored only as an argon2id hash) or the ID of the Privy account you sign in with, with the Solana wallet addresses it reports (public addresses; Algebra never holds a wallet's keys).
• Spend Passes and agent tokens — each pass's label, limits and controls. A token is shown to you once and stored only as a hash.
• Requests your agents make — what each asked for (the kind of work, its input, the most it would pay), which providers were priced and chosen, the decisions made, what was paid, and the signed receipt. The input is whatever your agent sent, so it can contain personal data if your agent put it there: send only what the work needs.
• Answers — the provider's answer to a paid request is kept so that asking again returns it instead of paying twice. It is encrypted at rest and deleted after 24 hours unless the operator of the instance sets another time (never more than 7 days), and a request can ask for its answer not to be kept at all. Otherwise we keep only a hash of it.
• Agent chats — your messages and the agent's replies are sent to our server and to the AI provider to produce each reply. The conversation itself is kept in your browser, not in our database; clearing it or starting a new chat removes it.
• Devices — for each signed-in session, its IP address, browser and last activity, so you can see and sign out devices.
• Demo requests — if you send the Book a demo form: the business name, work email, website, what you want to build and the usage you expect, with the IP address it came from. We use it only to reply to you, and it is not shared with anyone else. Ask us to delete it at any time.

We never collect card numbers, wallet private keys or one-time passwords.

• Price requests. To compare providers, Algebra asks each candidate (up to twelve) what it would charge, with a free request that carries your agent's input. Providers you did not choose therefore see what your agent asked for. If an input is sensitive, name the provider you want and the others are not asked.
• The provider that is paid receives the input again with the payment, and the payment on the blockchain shows the wallet, the amount and the time.
• Searching the web for providers (when your agent asks and the operator has set it up) sends a description of the kind of work wanted to Google's Gemini, not your agent's input. Endpoints it finds are priced with a sample input, never yours.
• Swaps send the token and amount to Jupiter and a transaction to a Solana node.

• to run your account and keep it secure;
• to find providers, apply your limits, ask for your approval, pay, and prove what happened;
• to send account emails: password resets, an alert after each sign-in, and a receipt for each payment that lands on a chain. They go to the address you sign in with, or to one you add and confirm in your account; you can turn the alerts and the receipts off there;
• to prevent abuse and fraud, and to meet legal and accounting obligations.

We process your data on the basis of your consent, given when you create an account, and for the legitimate uses the law allows.

• Providers — as described above: those asked for a price, and the one paid.
• The Solana network and its node providers — payments are public by nature.
• Privy (privy.io), if you sign in with it — your email address or wallet address, to send you a code or connect your wallet, and to create a Solana wallet for you if you have none. Privy holds that wallet's key, not Algebra, and its own privacy policy applies to what it keeps.
• AI model providers (Google Gemini, Anthropic or OpenAI, depending on the model in use) — your chat messages and the results of the agent's searches, to generate replies.
• Our email provider and hosting providers — to send account emails and run the service.
• Authorities, when the law requires it.

Some of these providers process data outside India, under their own security and privacy commitments.

Account data stays while your account exists. When you delete your account we erase your name, email, sign-ins and sessions, revoke every agent and Spend Pass, delete every answer we kept and remove the input of your requests. The requests themselves, their receipts and the hash of each request are records the law and the blockchain require us to keep; after deletion they remain tied only to an anonymous ID, not to you. Sessions that have ended are cleared after a week.

Answers are encrypted at rest under a key used for nothing else. Sessions use secure, HTTP-only cookies. Passwords and agent tokens are hashed, never stored. Every payment is checked against your limits on our servers, outgoing requests can only reach public internet addresses, and access to data is limited to what each part of the service needs.

• See your data — download it anytime under Account → Your data: your account, Spend Passes, requests and devices. The answers we keep for repeat requests are readable through the API for as long as they are kept.
• Correct it — edit your name and limits in the console, or ask us.
• Erase it — delete your account under Account → Your data.
• Withdraw consent — by deleting your account; this doesn't affect processing that already happened.
• Nominate someone to exercise these rights for you, and raise a grievance with our Grievance Officer. If we don't resolve it, you can complain to the Data Protection Board of India.

We use one essential cookie to keep you signed in. Privy's sign-in runs in your browser and may keep its own data there while you sign in. Your browser stores your current agent chat and chosen AI model. We use no advertising or tracking cookies and no third-party analytics.

Algebra is not for anyone under 18, and we do not knowingly collect their data.

If we change this policy in a way that matters, we will tell you in the app or by email before the change applies.

• Algebra
• Or see all the ways to reach us.