Privacy Policy

Dexter Labs Corporation is responsible for the personal information covered by this Policy. This Policy applies to Services that link to or expressly incorporate it. A third-party wallet, agent host, merchant, blockchain, communications provider, or other service may process information under its own privacy policy when you choose to use it with Dexter.

Public blockchain information is available independently of Dexter. A wallet address, transaction, token balance, smart-contract interaction, or other onchain record may remain public even if you stop using the Services or ask Dexter to delete information from its own systems.

The information Dexter collects depends on the Services you use and the actions you request.

2.1 Account and contact information

We may collect your email address, display name, preferences, account identifiers, support correspondence, and other information you choose to provide. If you use an organization account, we may also collect the organization name and your role or authority.

2.2 Wallet and public blockchain information

We collect or retrieve wallet addresses, token balances, transaction history, network information, smart-contract activity, and other public blockchain data needed to display your account or complete a requested action. Because blockchain data is public, Dexter may retrieve it from a blockchain node, indexer, explorer, or data provider rather than directly from you.

Dexter does not obtain your passkey credential or require you to provide a seed phrase or unrestricted private signing key for a Dexter self-custodial wallet.

2.3 Authorizations and transaction records

We collect instructions and records associated with transactions and delegated authority, including the selected agent or connected service, permitted actions, spending cap, duration, assets, networks, recipients, merchants, transaction parameters, approval status, signatures or signature references, receipts, errors, and settlement status.

These records allow Dexter to present the authorization you approved, execute or monitor the requested action, prevent replay or unauthorized expansion, resolve support issues, and maintain an account history.

2.4 Agent and connected-service information

When you use Dexter through ChatGPT, Claude, Codex, another agent host, or a connected application, Dexter receives the request and context that you or that service sends to Dexter for the action. This may include a wallet address, transaction instruction, product request, token query, resource URL, or other information relevant to the requested operation.

Dexter does not request unrestricted access to your unrelated conversation history. Your agent host determines what information it sends and may independently process your conversations, account information, and usage under its own terms and privacy policy.

2.5 Phone and messaging information

If you link a phone number, request a verification code, or opt in to Dexter messaging, Dexter and its communications providers may process your phone number and related verification, delivery, timing, support, and error information needed for that feature. If Dexter offers an opt-in messaging program, information associated with that program may also include the consent language presented to you, the time and source of your consent, and your opt-out status.

2.6 Device, security, and usage information

We may collect IP address, browser and device type, operating system, referring page, pages or features used, approximate location derived from IP address, session identifiers, authentication events, request timestamps, error information, and activity used to detect fraud, abuse, or unauthorized access.

We may use analytics to understand general website and feature usage. Analytics information may include page views, referral source, browser or device information, approximate location, and interaction events. Dexter does not use this information for targeted advertising.

2.7 Information we do not need

Do not send Dexter seed phrases, private keys, passkey secrets, government identifiers, health information, or other sensitive personal information unless a specific Dexter feature expressly requests it and explains why it is necessary. If you include unnecessary personal information in an instruction or support request, it may be processed as part of that request.

Dexter uses personal information to:

• create, authenticate, and support your account;
• display wallet and public blockchain information;
• record and enforce transaction-specific or advance authorizations;
• process payments, purchases, transfers, swaps, x402 transactions, and other actions you request;
• connect the Services with agents, merchants, networks, and applications you select;
• deliver requested verification codes and, where separately offered, transactional messages such as payment links, receipts, and service alerts;
• detect fraud, abuse, security threats, unauthorized access, and technical failures;
• provide support and resolve disputes;
• understand general product usage and improve the Services;
• comply with legal obligations and enforce our agreements; and
• protect Dexter, our users, and the public.

Dexter does not sell personal information or use private wallet activity, transaction instructions, or agent interactions to create advertising profiles.

Dexter discloses information only as needed to operate the Services, carry out your instructions, protect the Services, or comply with law.

4.1 Service providers

We use service providers for functions such as cloud hosting and databases, authentication, blockchain connectivity and data, transaction routing, communications, AI processing, analytics, fraud prevention, and customer support. Depending on the feature you use, these providers may include:

• Supabase for account authentication and database infrastructure;
• Helius and other blockchain infrastructure providers for network connectivity and transaction data;
• Jupiter and other transaction or liquidity providers when you request a supported swap or routed transaction;
• Birdeye, DexScreener, and other market-data providers for token, price, and market information;
• OpenAI, Anthropic, or another model provider when the feature you choose requires model processing;
• Google Analytics for general website and product analytics; and
• Twilio and other communications providers for verification and transactional messaging.

These providers receive the information reasonably necessary to perform their function for Dexter. Their own privacy policies may also apply to information they receive directly from you through their services.

4.2 Services and counterparties you choose

When you direct Dexter to interact with an agent host, merchant, API provider, wallet, blockchain, protocol, exchange, or other counterparty, Dexter transmits the information needed to complete that interaction. A blockchain transaction will make the transaction data public according to that network’s design.

4.3 Legal, safety, and corporate events

Dexter may disclose information when reasonably necessary to comply with law or legal process; investigate fraud, abuse, or security threats; protect rights, safety, and property; enforce agreements; or establish, exercise, or defend legal claims.

If Dexter is involved in a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, information may be disclosed as part of that transaction subject to appropriate confidentiality and use restrictions.

4.4 No sale of personal information

Dexter does not sell or rent personal information. Dexter does not share personal information for cross-context behavioral advertising or permit service providers to use private financial activity for their own marketing.

Mobile information, text-messaging originator opt-in data, and messaging consent will not be shared with third parties or affiliates for marketing or promotional purposes. Dexter may provide that information to communications providers solely as necessary to deliver messages, honor opt-out requests, prevent abuse, and support the messaging service.

An agent host such as ChatGPT or Claude may process your conversation, account data, memory, attachments, and instructions under its own terms. Dexter receives the request and relevant context the host sends when you invoke Dexter; connecting Dexter does not give Dexter general access to browse unrelated conversations in your host account.

Your agent may have authority to initiate transactions automatically within limits you approved. That authority is a financial permission, not permission to collect unrelated personal information. You can review and revoke active Dexter authorizations through the available wallet or account controls, subject to transactions and obligations already created before revocation.

Dexter uses cookies, local storage, and similar technologies that are necessary to authenticate users, maintain sessions, preserve preferences, prevent fraud, and operate requested features.

Dexter may also use Google Analytics to understand general site traffic and product usage. Google Analytics may use cookies or similar identifiers and may receive page, device, browser, referral, approximate-location, and interaction information. Dexter does not use Google Analytics for targeted advertising or intentionally send passkey credentials, seed phrases, or private keys to analytics providers.

You can use browser controls to delete or restrict cookies. Disabling necessary storage may prevent parts of the Services from working.

Retention varies by record type and the reason the record exists. Dexter retains account, authorization, security, communications, support, and transaction records for as long as reasonably necessary to operate and protect the Services, preserve accurate authorization and payment history, satisfy legal obligations, resolve disputes, and enforce agreements.

We may retain records longer when they are relevant to fraud prevention, an active dispute, a legal hold, an outstanding payment or settlement obligation, or another lawful purpose. We delete or de-identify information when it is no longer reasonably needed, subject to technical limitations and backup cycles.

Public blockchain records are maintained by the relevant network, not by Dexter, and cannot be deleted by Dexter. Deleting a Dexter account does not erase an onchain transaction or information independently retained by a third party under its own policies.

Depending on where you live, you may have the right to request access to, correction of, deletion of, or a portable copy of personal information Dexter maintains about you. You may also have the right to object to or restrict certain processing, withdraw consent where processing depends on consent, or appeal a decision concerning a privacy request.

You may also:

• disconnect an agent host or other connected service;
• revoke an active agent authorization using the available account controls;
• reply STOP to opt out of Dexter text messages;
• use browser controls for cookies and local storage; and
• stop using the Services.

To submit a privacy request, email [email protected]. Dexter may need to verify your identity and authority before completing the request. We may retain information that applicable law permits or requires us to retain and will explain a material denial where required.

Dexter does not discriminate against users for exercising applicable privacy rights.

Dexter uses administrative, technical, and organizational safeguards designed to protect personal information, including encrypted network transmission, authentication controls, access restrictions, monitoring, and separation of passkey authorization from agent processing.

Your passkey credential remains with your authenticator and is not disclosed to Dexter. Agents act through the limited authority you approve rather than receiving your root passkey authority. No system can eliminate every security risk, and you remain responsible for securing your devices, authenticators, connected accounts, and agent permissions.

If you believe your Dexter account or an authorization has been compromised, contact [email protected] and revoke affected permissions as soon as practical.

Dexter is operated from the United States, and information may be processed in the United States and other countries where Dexter or its service providers operate. Those countries may have different data-protection laws from your jurisdiction. Where required, Dexter uses an appropriate legal mechanism for an international transfer.

Where applicable law requires a legal basis for processing, Dexter relies on performance of a contract, compliance with legal obligations, consent, and legitimate interests such as securing, supporting, and improving the Services. You may contact us for more information about the basis applicable to a particular activity.

The Services are not directed to anyone under 18, and Dexter does not knowingly collect personal information from children. If you believe a child has provided personal information to Dexter, contact [email protected].

Dexter may update this Policy as the Services, providers, or applicable requirements change. We will post the updated Policy and revise the “Last updated” date. If a change materially affects how we use personal information, we may provide additional notice through the Services or your registered contact information before the change applies where required.

For privacy questions or requests, contact:

• [email protected]
• [email protected]

The Services are operated by Dexter Labs Corporation.