Privacy Policy

Last updated: August 19, 2026

This Privacy Policy describes how Trigger Labs Inc. (the “Company,” “we,” “us”) handles information in connection with the OpenSpender service (the “Service”).

1. What we collect

Account data: the email address you sign in with (via our authentication provider, Privy) and the public address of your self-custodial wallet.

Allowance and usage data: the allowance budgets you configure, and a ledger of requests made with your allowance tokens — the destination service, amounts quoted and paid, settlement transaction identifiers, timestamps, and outcome. This ledger exists so you can see exactly what your agents spent; it is shown to you on your wallet page.

Operational logs: standard server logs (IP address, user agent, request metadata) retained briefly for security and debugging.

2. What we never collect

Private keys. Wallets are self-custodial through Privy’s architecture; your keys are never transmitted to or stored by the Company. Card and bank details. Fiat purchases are processed entirely by onramp providers (such as Stripe, MoonPay, or Coinbase); their checkout collects payment details and any identity verification they require, under their own privacy policies. Tracking for advertising. The Service contains no advertising trackers and no third-party analytics.

3. Public blockchain data

Payments settle on public blockchains. Wallet addresses, amounts, and transactions are public, permanent, and outside any party’s ability to delete — including ours. Assume anything on-chain is visible to the world forever.

4. How we use information

To operate the Service: authenticating you, enforcing the budgets you set, executing and recording payments you have authorized, showing you your own activity, securing the Service, and complying with law. We do not sell your information and do not share it with third parties except the infrastructure providers necessary to run the Service (listed below), or where required by law.

5. Where information lives

Application data is stored on Company-operated infrastructure in the European Union (Germany), fronted by Cloudflare. Wallet and authentication infrastructure is operated by Privy. Fiat purchases are processed by the onramp provider you select at purchase time.

6. Retention and deletion

Account and ledger data are retained while your account is active. You may request deletion of your account data by contacting us; we will delete data we control within a reasonable period, except records we must keep for legal, security, or accounting reasons — and except on-chain data, which no one can delete. Deleting your account does not affect your wallet or funds, which remain yours through Privy’s export mechanisms.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information. To exercise them, contact us at the address below; we will respond as required by applicable law.

8. Cookies and local storage

The Service uses authentication cookies/tokens from Privy to keep you signed in, and browser local storage for interface state. No advertising cookies are used.

9. Children

The Service is not directed to anyone under 18, and we do not knowingly collect information from children.

10. Changes

We may update this policy; material changes will be posted here with an updated date.

11. Contact

Trigger Labs Inc. — [email protected]