Privacy
Last updated June 14, 2026
Account Opening Privacy Notice
| FACTS | WHAT DOES THIRD NATIONAL (“ISSUER”) DO WITH YOUR PERSONAL INFORMATION? |
| Why? | Financial companies choose how they share your personal information. Federal law gives consumers the right to limit some but not all sharing. Federal law also requires us to tell you how we collect, share, and protect your personal information. Please read this notice carefully to understand what we do. |
| What? | The types of personal information we collect and share depend on the product or service you have with us. This information can include:
When you are no longer our customer, we continue to share your information as described in this notice. |
| How? | All financial companies need to share customers’ personal information to run their everyday business. In the section below, we list the reasons financial companies can share their customers’ personal information; the reasons Issuer chooses to share; and whether you can limit this sharing. |
| Reasons we can share your personal information | Does Issuer share? | Can you limit this sharing? |
|---|---|---|
| For our everyday business purposes— such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus | YES | NO |
| For our marketing purposes— to offer our products and services to you | YES | NO |
| For joint marketing with other financial companies | YES | NO |
| For our affiliates’ everyday business purposes— information about your transactions and experiences | YES | NO |
| For our affiliates’ everyday business purposes— information about your creditworthiness | NO | WE DON’T SHARE |
| For our affiliates to market to you | NO | WE DON’T SHARE |
| For nonaffiliates to market to you | NO | WE DON’T SHARE |
| Questions? | Call +1 415-684-1053 or go to https://www.agentcard.sh/privacy |
Who we are
| Who is providing this notice? | Issuer |
What we do
| How does Issuer protect my personal information? | To protect your personal information from unauthorized access and use, we use security measures that comply with federal law. These measures include computer safeguards and secured files and buildings. |
| How does Issuer collect my personal information? | We collect your personal information, for example, when you
We may also collect your personal information from others, such as credit bureaus, affiliates, and other companies. |
| Why can’t I limit all sharing? | Federal law gives you the right to limit only
State laws and individual companies may give you additional rights to limit sharing. See below for more on your rights under state law. |
Definitions
| Affiliates | Companies related by common ownership or control. They can be financial and nonfinancial companies.
|
| Nonaffiliates | Companies not related by common ownership or control. They can be financial and nonfinancial companies.
|
| Joint marketing | A formal agreement between nonaffiliated financial companies that together market financial products or services to you.
|
Other important information
California and Vermont: In accordance with state law, we will not share your personal information with nonaffiliates except as permitted by law, including for example, for our own marketing purposes, for everyday business purposes, such as servicing your account, or with your consent.
Nevada: You are being provided this notice pursuant to Nevada law. You may be placed on our internal Do Not Call List by following the directions in the To Limit our Sharing section above. Nevada law requires that we provide you with the following contact information: Bureau of Consumer Protection, Office of the Nevada Attorney General, 555 E. Washington Ave., Suite 3900, Las Vegas, NV 89101; Phone number: 702-486-3132; email: agInfo@ag.nv.gov
North Dakota: In accordance with North Dakota law, we will not share information we collect about you with companies outside of our corporate family, except as permitted by law, including, for example, with your consent, to service your account. Residents of North Dakota are opted out from nonaffiliate marketing by default. We will limit sharing among our companies to the extent required by North Dakota law.
Privacy Policy
Agentcard Corporation (“Company,” “we,” “us,” or “our”) operates agentcard.sh (the “Site”) and related services. This Privacy Policy describes how we collect, use, disclose, and protect your information when you use the Site and our services.
Information We Collect
Information you provide
- Account information: name, email address, and password when you create an account
- Payment information: billing details processed through Stripe. We do not store full credit card numbers on our servers
- Card usage data: card names, labels, funding amounts, and transaction history associated with your virtual cards
- Support communications: messages you send through our support chat or email
Slack integration data
If you install our Slack app or link your Slack account, we collect and store the following:
- Workspace information: Slack workspace (team) ID and team name
- Bot token: an OAuth bot token issued by Slack, encrypted at rest
- Slack user ID: your Slack user ID, linked to your Agentcard account
We do not read, store, or process the content of messages in your Slack channels or direct messages.
To remove Slack data, uninstall the Agentcard app from your Slack workspace. You can also contact us at support@agentcard.sh to request deletion.
Information collected automatically
- Log data: IP address, browser type, operating system, referring URLs, pages visited, and timestamps
- Device information: device type, unique device identifiers, and mobile network information
- Usage data: how you interact with the Site and services, including API and MCP tool usage patterns
- Cookies and similar technologies: we use cookies and similar tracking technologies to maintain sessions and improve our services
How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Site and services
- Process transactions and send related information
- Create and manage your account
- Send you technical notices, security alerts, and support messages
- Respond to your comments, questions, and customer service requests
- Monitor and analyze trends, usage, and activity
- Detect, investigate, and prevent fraudulent transactions
- Comply with legal obligations
How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
- Service providers: with third-party vendors including Stripe, Visa, and hosting providers
- Legal compliance: when required by law or governmental request
- Protection of rights: to enforce our Terms of Use and protect rights and safety
- Business transfers: in connection with a merger, acquisition, or sale
- With your consent: when you have given us explicit permission
Data Security
Card credentials (PAN, CVV, expiry) are encrypted at rest using AES-256-GCM and are only decrypted when explicitly requested through authenticated MCP tools. No method of transmission is completely secure, but we implement appropriate technical and organizational measures.
Data Retention
We retain your personal information for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce our agreements.
Your Rights and Choices
Depending on your jurisdiction, you may have rights to access, correct, delete, or port your data. Contact us at support@agentcard.sh.
California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the CCPA. We do not sell personal information.
Cookies
We use essential cookies (authentication, security) and analytics cookies. You can control cookies through your browser settings.
Third-Party Analytics
We use Ahrefs Analytics and PostHog to help understand usage of the Site.
Children's Privacy
The Site is not intended for use by anyone under 18. We do not knowingly collect personal information from children under 18.
International Data Transfers
Your information may be transferred to servers located outside your jurisdiction. By using the Site, you consent to the transfer of your information to the United States.
Changes to This Policy
We may update this Privacy Policy from time to time. Continued use constitutes acceptance.
Contact
Agentcard Corporation
Attn: Karina Serfaty
1900 Jefferson St, Apt 202
San Francisco, CA 94123
support@agentcard.sh