Privacy

Last updated October 17, 2026. Run by chrismai.ai (Chris Mai), California.

What we collect

Request form: your name, email, project type and brief.
Agent requests (A2A): the messages your agent sends.
Technical data: a salted hash of your IP address (not the address itself), the browser or agent user-agent string, and timestamps, used for rate limits and abuse prevention.
Payments: for USDC, the transaction hash, amount and sending address, which are public on the Base blockchain anyway. For cards, the Stripe session ID and amount. Stripe handles card details; we never see full card numbers.
DataMyte-compatible submissions: whatever JSON a connected customer's workflow sends.

Why

Only to review and respond to your request, prevent spam and abuse, and keep basic records of payments. No advertising, no tracking cookies, no selling or renting of data.

Who processes it

Cloudflare (hosting, and the Turnstile spam check on the form), Supabase (database, US West), Stripe (card payments, if used), and the email provider that delivers new-request alerts to Chris. Data is shared with no one else unless the law requires it.

How long

As long as needed to handle your request and keep business records. Ask and we'll delete your request data, except payment records we have to keep.

Your choices

To see, correct or delete your data, use the request form (choose "Other" and write "privacy request"), or contact Chris through chrismai.ai. California residents have rights under the CCPA/CPRA, and we'll honor them.