1. Overview & custody model
Peribolos ("we", "us", or "our") provides smart contract-enforced vault policy software for autonomous AI agents on the Arc Blockchain Network. Owners retain control of vault assets and owner-authorized contract actions. For hosted agent execution, Circle Developer-Controlled Wallets manage agent signing keys server-side; those keys are not exposed to the browser. We collect only the technical credentials and workspace records needed to operate the service.
2. Data We Collect
- Workspace Authentication: When you log in via Supabase Auth (email magic link, Web3 SIWE, or Passkey), we store your email address or wallet address solely to associate your policy rules and vaults with your account.
- On-Chain Policy Telemetry: Public blockchain addresses, transaction hashes, smart vault policy parameters (daily budget caps, allowlisted payees, rate limits), and rule enforcement audit records are stored on public ledgers and indexers.
- API & Developer Logs: Standard request metadata (IP addresses, user agent header, API key identifiers) are logged for security, rate-limiting, and abuse prevention.
3. How We Use Data
We use collected metadata strictly for:
- Verifying authorization for agent vault policy configuration changes.
- Enforcing spending boundaries and displaying activity logs in your workspace.
- Preventing malicious prompt injection drains and unauthorized payment attempts.
- Maintaining system security, uptime, and Arc Testnet smart contract synchronization.
4. Circle DCW & Third-Party Services
Peribolos integrates with Circle Developer-Controlled Wallets (DCW) and Supabase Authentication. When you provision an agent, Circle DCW manages agent signing keys server-side under strict hardware security module (HSM) controls. Please review Circle's and Supabase's respective privacy policies for details on their data handling standards.
5. Data Retention & Security
Policy rule configurations and audit logs are retained for the active lifecycle of your workspace. Because blockchain transactions are permanent and immutable by nature, on-chain execution records recorded on the Arc Blockchain cannot be altered or deleted.
6. Contact & Data Inquiries
If you have questions regarding this Privacy Policy or wish to request workspace data deletion, please contact our security team at security@peribolos.io.