Privacy Policy

Who is responsible for your data

INTENT is operated by BMC SAASY TECH LTD (company number 12454158; registered office Flat 338, 372 Old Street, London, EC1V 9LT). For the personal data described below, we are the data controller (we decide what is collected and why) under UK GDPR.

What we collect, and where it lives

To run your subscription we need your email address and payment details. We do not store these on our own servers. They are collected and held by Stripe, our payment processor, whose security and card-industry compliance (PCI-DSS) exceed what most companies could build themselves. We hold only what we need to link your subscription to your agent: a one-way hash of your email (which cannot be turned back into your email) and your subscription status. Your trading activity happens under your own wallet on the public blockchain; we never see or hold your funds or keys.

If you joined through a partner service

Some services built on INTENT switch your agent on when you do something in the real world, for example Localmoney, which grants access when you spend time at a participating local business. Where you signed up through a partner like that, they are the data controller for whatever they collect (including any location check), under their own privacy policy. They pass us only what we need to activate your agent: your email address and how long your access should last. We never receive your location, your movements, or any record of where you have been.

Why we process it (lawful basis)

• To provide the service you signed up for: performance of our contract with you (email, subscription).
• To take payment: performance of contract, via Stripe.
• To prevent fraud and abuse, and meet legal obligations: our legitimate interests and legal duties.

Who we share it with

Stripe (payments) and Resend (to send you sign-in and account emails) act as our processors on our instructions. We do not sell your data. We may disclose information where required by law.

How long we keep it

We keep account data for as long as you have an account and for a reasonable period afterwards to meet legal, tax and fraud-prevention obligations, then delete or anonymise it. Stripe retains payment records under its own retention and legal obligations.

Your rights

Under UK GDPR you can ask us to access, correct, delete, or restrict your personal data, object to certain processing, or request portability. To exercise any of these, email support [at] intent.farm and we'll help.

Contact

Privacy questions: support [at] intent.farm. See also our Terms and Security page.